The version of Wireshark installed on the remote Windows host is prior to 4.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.8 advisory.

  - Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in     the Websocket dissector in Wireshark 1.8.x before 1.8.7 allow remote attackers to cause a denial of     service (application crash) via a malformed packet. (CVE-2013-3562)

  - In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop.
    This was addressed in epan/dissectors/packet-slsk.c by making loop bounds more explicit. (CVE-2017-9346)

  - In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial     of service (stack exhaustion) in the dissect_IODWriteReq function in plugins/profinet/packet-dcerpc-pn-     io.c. (CVE-2017-9766)

  - In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the VLAN dissector could crash. This was addressed in     epan/dissectors/packet-vlan.c by limiting VLAN tag nesting to restrict the recursion depth.
    (CVE-2018-9262)

  - Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17     allows denial of service via packet injection or crafted capture file (CVE-2021-39929)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Wireshark 4.0.x < 4.0.8 Multiple Vulnerabilities

high Nessus Plugin ID 180101

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.4 Oct 23, 2023, 4:39 PM CVSSv3 score source (changed from "CVE-2021-39929" to "CVE-2023-4513") Plugin Feed: 202310231639
Version 1.3 Aug 29, 2023, 9:59 AM IAVM reference Plugin Feed: 202308290959
Version 1.2 Aug 25, 2023, 10:04 AM IAVM reference Plugin Feed: 202308251004
Version 1.1 Aug 24, 2023, 8:02 PM CVE (set "CVE" coverage to "CVE-2013-3562,CVE-2017-9346,CVE-2017-9766,CVE-2018-9262,CVE-2021-39929,CVE-2023-2906,CVE-2023-4511,CVE-2023-4512,CVE-2023-4513") Plugin Feed: 202308242002
Version 1.0 Aug 24, 2023, 2:03 AM New Plugin Feed: 202308240203