HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3165-1 advisory.

    wireshark was updated from version 3.6.23 to version 4.2.6 (jsc#PED-8517):

    - Security issues fixed with this update:

      * CVE-2024-0207: HTTP3 dissector crash (bsc#1218503)
      * CVE-2024-0210: Zigbee TLV dissector crash (bsc#1218506)
      * CVE-2024-0211: DOCSIS dissector crash (bsc#1218507)
      * CVE-2023-6174: Fixed SSH dissector crash (bsc#1217247)
      * CVE-2023-6175: NetScreen file parser crash (bsc#1217272)
      * CVE-2023-5371: RTPS dissector memory leak (bsc#1215959)
      * CVE-2023-3649: iSCSI dissector crash (bsc#1213318)
      * CVE-2023-2854: BLF file parser crash (bsc#1211708)
      * CVE-2023-0666: RTPS dissector crash (bsc#1211709)
      * CVE-2023-0414: EAP dissector crash (bsc#1207666)

    - Major changes introduced with versions 4.2.0 and 4.0.0:

      * Version 4.2.0 https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
      * Version 4.0.0 https://www.wireshark.org/docs/relnotes/wireshark-4.0.0.html

    - Added an aditional desktopfile to start wireshark which asks for       the super user password.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.2.1 advisory.

  - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via     packet injection or crafted capture file (CVE-2024-0208)

  - IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of     service via packet injection or crafted capture file (CVE-2024-0209)

  - HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-0207)

  - Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted     capture file (CVE-2024-0210)

  - DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-0211)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.2.1 advisory.

  - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via     packet injection or crafted capture file (CVE-2024-0208)

  - IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of     service via packet injection or crafted capture file (CVE-2024-0209)

  - HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-0207)

  - Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted     capture file (CVE-2024-0210)

  - DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-0211)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
206878	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wireshark (SUSE-SU-2024:3165-1)	Nessus	SuSE Local Security Checks	high
187631	Wireshark 4.2.x < 4.2.1 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	high
187630	Wireshark 4.2.x < 4.2.1 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2024-0207

high

Tenable Plugins

high

high

high