The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - wireshark: free operation on an uninitialized memory address in wiretap/netmon.c (CVE-2018-6836)

  - The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table     searches for empty strings, which allows remote attackers to cause a denial of service (application crash)     via a crafted packet, related to the (1) dissector_get_string_handle and (2)     dissector_get_default_string_handle functions. (CVE-2015-6243)

  - The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in     Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained in packet data, which allows     remote attackers to cause a denial of service (application crash) via a crafted packet. (CVE-2015-6244)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Detections

Analytics

RHEL 6 : wireshark (Unpatched Vulnerability)

critical Nessus Plugin ID 199531

Version 1.2

Version 1.1

Version 1.2 Oct 11, 2024, 7:17 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202410110717
Version 1.1 Jun 4, 2024, 3:18 AM New Plugin Feed: 202406040318