It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-199 advisory.

    Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows     denial of service via packet injection or crafted capture file (CVE-2022-4344)

    Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0     to 3.6.9 allows denial of service via packet injection or crafted capture file (CVE-2022-4345)

    RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1992)

    LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1993)

    GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet     injection or crafted capture file (CVE-2023-1994)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-199)

high Nessus Plugin ID 176932

Version 1.2