It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-348 advisory.

    Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark     versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.
    (CVE-2023-2906)

    BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service     via packet injection or crafted capture file (CVE-2023-4511)

    CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted     capture file (CVE-2023-4512)

    BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via     packet injection or crafted capture file (CVE-2023-4513)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-348)

high Nessus Plugin ID 181709

Version 1.3