Test ID:	1.3.6.1.4.1.25623.1.0.808288
Category:	Denial of Service
Title:	Wireshark Multiple Denial of Service Vulnerabilities-02 (Aug 2016) - Mac OS X
Summary:	Wireshark is prone to multiple denial of service vulnerabilities.
Description:	Summary: Wireshark is prone to multiple denial of service vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - An error in 'epan/proto.c' script cause OpenFlow dissector (and possibly others) to go into a long loop. - The 'epan/dissectors/packet-ldss.c' script in the LDSS dissector mishandles conversations. - An Off-by-one error in 'epan/dissectors/packet-rlc.c' script in the RLC dissector. - The 'epan/dissectors/packet-rlc.c' in the RLC dissector uses an incorrect integer data type. - An error in 'epan/dissectors/packet-wsp.c' script cause WSP dissector to go into a long loop. - An error in 'epan/dissectors/packet-packetbb.c' script could cause a divide-by-zero error in PacketBB dissector. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct denial of service attack. Affected Software/OS: Wireshark version 1.12.x before 1.12.13 and 2.0.x before 2.0.5 on Mac OS X. Solution: Upgrade to Wireshark version 1.12.13 or 2.0.5 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6511 Debian Security Information: DSA-3648 (Google Search) http://www.debian.org/security/2016/dsa-3648 http://openwall.com/lists/oss-security/2016/07/28/3 http://www.securitytracker.com/id/1036480 Common Vulnerability Exposure (CVE) ID: CVE-2016-6509 Common Vulnerability Exposure (CVE) ID: CVE-2016-6510 Common Vulnerability Exposure (CVE) ID: CVE-2016-6508 Common Vulnerability Exposure (CVE) ID: CVE-2016-6506 Common Vulnerability Exposure (CVE) ID: CVE-2016-6505 BugTraq ID: 92163 http://www.securityfocus.com/bid/92163 https://www.exploit-db.com/exploits/40197/
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.