The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3746 advisory.

  - BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service     via packet injection or crafted capture file (CVE-2023-4511)

  - BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via     packet injection or crafted capture file (CVE-2023-4513)

  - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via     packet injection or crafted capture file (CVE-2024-0208)

  - SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted     capture file (CVE-2023-6174) (CVE-2023-6175)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-3746 : libwireshark-data - security update

high Nessus Plugin ID 191458

Version 1.1