This host is installed with Wireshark and is prone to denial of service vulnerability.

Successful exploitation will allow attacker to cause denial of service attack - via a crafted packet to the RTP dissector. - via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors. Impact Level: Application

Upgrade to Wireshark 1.10.10 or later, For updates refer to https://www.wireshark.org

Flaws exists due to, - the SDP dissector creates duplicate hashtables for a media channel. - the Use-after-free vulnerability in the SDP dissector.

Wireshark version 1.10.x before 1.10.10 on Windows

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://www.osvdb.com/111597
• http://www.osvdb.com/111598
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9920
• https://www.wireshark.org/security/wnpa-sec-2014-12.html

---

Updated on 2015-03-25