VID |
50084 |
Severity |
30 |
Port |
139,445 |
Protocol |
TCP |
Class |
SMB |
Detailed Description |
The installed version of Wireshark is earlier than 2.0.0. It is, therefore, affected by multiple denial of service vulnerabilities in the following components :
- 802.11 dissector - ANSI A dissector - Ascend file parser - BER dissector - Bluetooth Attribute dissector - DIAMETER dissector - GSM A dissector - IPMI dissector - MP2T file parser - MS-WSP dissector - NBAP dissector - NLM dissector - NWP dissector - PPI dissector - RSL dissector - RSVP dissector - S7COMM dissector - SCTP dissector - Sniffer file parser - TDS dissector - VeriWave file parser - ZigBee ZCL dissector - zlib compression
* Note: This check requires an account with administrative privileges which can log into the host to scan. Absence of this condition will result in the check not being performed and a False Negative for all vulnerable hosts.
* References: https://www.wireshark.org/docs/relnotes/wireshark-2.0.1.html
* Platforms Affected: Wireshark versions 2.0.0 Microsoft Windows Any version |
Recommendation |
Upgrade to the latest version Wireshark (2.0.1 or later), available from the Wireshark.org Web site at http://www.wireshark.org/download/win32/all-versions/ |
Related URL |
CVE-2015-8711,CVE-2015-8718,CVE-2015-8720,CVE-2015-8721,CVE-2015-8722,CVE-2015-8723,CVE-2015-8724,CVE-2015-8725,CVE-2015-8726,CVE-2015-8727 (CVE) |
Related URL |
(SecurityFocus) |
Related URL |
(ISS) |
|