The version of wireshark installed on the remote host is prior to 1.10.14-24. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1438 advisory.

    In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This     was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations.
    (CVE-2018-16057)

    In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This     was addressed in epan/dissectors/packet-mmse.c by preventing length overflows. (CVE-2018-19622)

    In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go     into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that     are too long. (CVE-2018-14368)

    In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib     decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid     a buffer over-read. (CVE-2018-14340)

    In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a     large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset     overflow. (CVE-2018-14341)

    In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was     addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing '\0'     character. (CVE-2018-11362)

    In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash. This was addressed in     epan/dissectors/packet-sigcomp.c by correcting the extraction of the length value. (CVE-2018-7418)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : wireshark (ALAS-2020-1438)

high Nessus Plugin ID 137569

Version 1.3