dumpcap now stores temporary capture files in /var/tmp

  - Convert automake/pkgconfig files into patches (better     upstream integration)

    - Restored category in the *.desktop file

    - Install another one necessary header file -       frame_data_sequence.h

  - Add basic OpenFlow dissector

    - Ver. 1.10.2

  - Ver. 1.10.1 fix missing ws_symbol_export.h

  - Ver. 1.10.2

  - Ver. 1.10.1 fix missing ws_symbol_export.h

  - Enhance desktop integration (*.desktop and MIME-related     files)

    - Add basic OpenFlow dissector

    - Ver. 1.10.2

  - Ver. 1.10.1 fix missing ws_symbol_export.h

  - Ver. 1.10.2

  - Ver. 1.10.1 fix missing ws_symbol_export.h

  - Enhance desktop integration (*.desktop and MIME-related     files)

    - Add basic OpenFlow dissector

    - Ver. 1.10.2

  - Ver. 1.10.1 fix missing ws_symbol_export.h

  - Ver. 1.10.2

  - Ver. 1.10.1 fix missing ws_symbol_export.h

  - Ver. 1.10.2

    - Various security fixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Wireshark installed on the remote Windows host is prior to 1.10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.1 advisory.

  - The IsDFP_Frame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in     Wireshark 1.10.x before 1.10.1 does not validate MAC addresses, which allows remote attackers to cause a     denial of service (NULL pointer dereference and application crash) via a crafted packet. (CVE-2013-4936)

  - The parseFields function in epan/dissectors/packet-dis-pdus.c in the DIS dissector in Wireshark 1.8.x     before 1.8.9 and 1.10.x before 1.10.1 does not terminate packet-data processing after finding zero     remaining bytes, which allows remote attackers to cause a denial of service (loop) via a crafted packet.
    (CVE-2013-4929)

  - The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x     before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which     allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    (CVE-2013-4083)

  - The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which     allows remote attackers to cause a denial of service (application crash) via a crafted packet.
    (CVE-2013-4920)

  - Off-by-one error in the dissect_radiotap function in epan/dissectors/packet-ieee80211-radiotap.c in the     Radiotap dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service     (application crash) via a crafted packet. (CVE-2013-4921)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
70181	Fedora 19 : wireshark-1.10.2-6.fc19 (2013-17661)	Nessus	Fedora Local Security Checks	2013/9/28	2021/1/11	high
69105	Wireshark 1.10.x < 1.10.1 Multiple Vulnerabilities	Nessus	Windows	2013/7/29	2026/10/21	high

検出

プラグインの検索

high

high