It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-673 advisory.

    Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to     3.4.15 allows denial of service via packet injection or crafted capture file (CVE-2022-3190)

    Memory handling issue in editcap could cause denial of service via crafted capture file (CVE-2024-4853)

    MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to     3.6.22 allow denial of service via packet injection or crafted capture file (CVE-2024-4854)

    Use after free issue in editcap could cause denial of service via crafted capture file (CVE-2024-4855)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2024-673)

medium Nessus Plugin ID 202924

Version 1.3