Wireshark 2.4.x < 2.4.6 多個弱點
medium Nessus Plugin ID 108885
語言:
概要
遠端 Windows 主機上安裝的應用程式受到多個弱點影響。說明
遠端 Windows 主機上安裝的 Wireshark 為 2.4.6 之前版本。因此，它受到 wireshark-2.4.6 公告中提及的多項漏洞影響。- MP4 解剖器可能會當機。有可能透過注入錯誤封包到線路上，或說服他人讀取錯誤封包追蹤檔，使 Wireshark 當機。（wireshark-bug-13777）
- ADB解剖器可能會當機。有可能透過注入錯誤封包到線路上，或說服他人讀取錯誤封包追蹤檔，使 Wireshark 當機。（wireshark-bug-14460）
- IEEE 802.15.4 解剖器可能會損毀。有可能透過注入錯誤封包到線路上，或說服他人讀取錯誤封包追蹤檔，使 Wireshark 當機。（wireshark-bug-14468）
- NBAP解剖器可能會當機。有可能透過注入錯誤封包到線路上，或說服他人讀取錯誤封包追蹤檔，使 Wireshark 當機。（線鯊蟲-14471）
- VLAN 拆除器可能會當機。有可能透過注入錯誤封包到線路上，或說服他人讀取錯誤封包追蹤檔，使 Wireshark 當機。（wireshark-bug-14469）
請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。
解決方案
升級版本至 Wireshark 2.4.6 或更新版本。另請參閱
https://gitlab.com/wireshark/wireshark/-/issues/13777
https://gitlab.com/wireshark/wireshark/-/issues/14460
https://gitlab.com/wireshark/wireshark/-/issues/14467
https://gitlab.com/wireshark/wireshark/-/issues/14468
https://gitlab.com/wireshark/wireshark/-/issues/14469
https://gitlab.com/wireshark/wireshark/-/issues/14471
https://gitlab.com/wireshark/wireshark/-/issues/14472
https://gitlab.com/wireshark/wireshark/-/issues/14480
https://gitlab.com/wireshark/wireshark/-/issues/14481
https://gitlab.com/wireshark/wireshark/-/issues/14482
https://gitlab.com/wireshark/wireshark/-/issues/14483
https://gitlab.com/wireshark/wireshark/-/issues/14484
https://gitlab.com/wireshark/wireshark/-/issues/14485
https://gitlab.com/wireshark/wireshark/-/issues/14486
https://gitlab.com/wireshark/wireshark/-/issues/14487
https://gitlab.com/wireshark/wireshark/-/issues/14488
https://gitlab.com/wireshark/wireshark/-/issues/14489
https://gitlab.com/wireshark/wireshark/-/issues/14530
https://gitlab.com/wireshark/wireshark/-/issues/14576
https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html
https://www.wireshark.org/security/wnpa-sec-2018-15
https://www.wireshark.org/security/wnpa-sec-2018-16
https://www.wireshark.org/security/wnpa-sec-2018-17
https://www.wireshark.org/security/wnpa-sec-2018-18
https://www.wireshark.org/security/wnpa-sec-2018-19
https://www.wireshark.org/security/wnpa-sec-2018-20
https://www.wireshark.org/security/wnpa-sec-2018-21
https://www.wireshark.org/security/wnpa-sec-2018-22
Plugin 詳細資訊
嚴重性: Medium
ID: 108885
檔案名稱: wireshark_2_4_6.nasl
版本: 1.9
類型: Local
代理程式: windows
系列: Windows
已發布: 2018/4/6
已更新: 2026/5/2
支援的感應器: Frictionless Assessment Agent, Nessus Agent, Nessus
弱點資訊
CPE: cpe:/a:wireshark:wireshark
必要的 KB 項目: SMB/Registry/Enumerated, installed_sw/Wireshark
可輕鬆利用: No known exploits are available
修補程式發佈日期: 2018/4/3
弱點發布日期: 2017/6/8
參考資訊
BID: 99085