Detections
Analytics
SuSE 11.1 Security Update : wireshark (SAT Patch Number 5281)
high Nessus Plugin ID 57136
Language:
Synopsis
The remote SuSE 11 host is missing a security update.Description
This update of wireshark fixes the following vulnerabilities :- Wireshark IKE dissector vulnerability. (CVE-2011-3266)
- Wireshark Lua script execution vulnerability.
(CVE-2011-3360)
- Wireshark buffer exception handling vulnerability.
(CVE-2011-3483)
- Lucent/Ascend file parser susceptible to infinite loop.
(CVE-2011-2597)
- ANSI MAP dissector susceptible to infinite loop.
(CVE-2011-2698)
- Large/infinite loop in the DICOM dissector.
(CVE-2011-1957)
- A corrupted snoop file could crash Wireshark.
(CVE-2011-1959)
- Malformed compressed capture data could crash Wireshark.
(CVE-2011-2174)
- A corrupted Visual Networks file could crash Wireshark.
(CVE-2011-2175)
- dereferene a NULL pointer if we had a corrupted Diameter dictionary. (CVE-2011-1958)
Solution
Apply SAT patch number 5281.See Also
https://bugzilla.novell.com/show_bug.cgi?id=697516
https://bugzilla.novell.com/show_bug.cgi?id=706728
https://bugzilla.novell.com/show_bug.cgi?id=718032
http://support.novell.com/security/cve/CVE-2011-1957.html
http://support.novell.com/security/cve/CVE-2011-1958.html
http://support.novell.com/security/cve/CVE-2011-1959.html
http://support.novell.com/security/cve/CVE-2011-2174.html
http://support.novell.com/security/cve/CVE-2011-2175.html
http://support.novell.com/security/cve/CVE-2011-2597.html
http://support.novell.com/security/cve/CVE-2011-2698.html
http://support.novell.com/security/cve/CVE-2011-3266.html
Plugin Details
Severity: High
ID: 57136
File Name: suse_11_wireshark-111013.nasl
Version: 1.9
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 12/13/2011
Updated: 1/19/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:novell:suse_linux:11:wireshark, cpe:/o:novell:suse_linux:11
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/13/2011
Exploitable With
CANVAS (White_Phosphorus)
Core Impact
Metasploit (Wireshark console.lua Pre-Loading Script Execution)
Reference Information
CVE: CVE-2011-1957, CVE-2011-1958, CVE-2011-1959, CVE-2011-2174, CVE-2011-2175, CVE-2011-2597, CVE-2011-2698, CVE-2011-3266, CVE-2011-3360, CVE-2011-3483