Test ID:	1.3.6.1.4.1.25623.1.0.813373
Category:	General
Title:	Wireshark Security Updates (wnpa-sec-2018-32, wnpa-sec-2018-27, wnpa-sec-2018-26) - Mac OS X
Summary:	Wireshark is prone to multiple vulnerabilities.
Description:	Summary: Wireshark is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - A buffer overflow during FTE processing in 'epan/crypt/dot11decrypt.c' script. - A buffer overflow error in 'epan/dissectors/packet-rtcp.c' script. - An error in string handling in 'epan/dissectors/packet-ieee1905.c' script. Vulnerability Impact: Successful exploitation will allow attackers to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. Affected Software/OS: Wireshark version 2.6.0 on Mac OS X. Solution: Upgrade to Wireshark version 2.6.1 or later. Please see the references for more information. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-11361 BugTraq ID: 104308 http://www.securityfocus.com/bid/104308 http://www.securitytracker.com/id/1041036 SuSE Security Announcement: openSUSE-SU-2020:0362 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html Common Vulnerability Exposure (CVE) ID: CVE-2018-11355 Common Vulnerability Exposure (CVE) ID: CVE-2018-11354
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.