The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.16. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.16 advisory.

  - The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark     1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error     condition, which allows remote attackers to cause a denial of service (application crash) via a crafted     packet. (CVE-2013-4074)

  - The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark     1.6.x before 1.6.16 and 1.8.x before 1.8.8 does not properly determine when to use a recursive approach,     which allows remote attackers to cause a denial of service (stack consumption) via a crafted packet.
    (CVE-2013-4081)

  - The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x     before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which     allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    (CVE-2013-4083)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 1.6.x < 1.6.16 Multiple Vulnerabilities (macOS)

high Nessus Plugin ID 176418

Version 1.1

Version 1.0

Version 1.0

Version 1.1 Dec 14, 2023, 4:32 PM CVSSv3 score source (set to "CVE-2013-4081") Plugin Feed: 202312141632
Version 1.0 May 26, 2023, 4:10 PM New Plugin Feed: 202305261610
Version 1.0 Dec 14, 2023, 2:28 PM CVSSv3 score source (set to "CVE-2013-4081") Plugin Feed: 202312141428