This host is installed with Wireshark and is prone to denial of sevice vulnerability.

Successful exploitation will allow attackers to cause denial of service attack. Impact Level: Application

Upgrade to Wireshark version 1.12.1 or later, For updates refer to https://www.wireshark.org

Flaws are due to, - Error in the get_quoted_string and get_unquoted_string functions in epan/dissectors/packet-cups.c in the CUPS dissector. - The dissect_hip_tlv function in epan/dissectors/packet-hip.c in the HIP dissector does not properly handle a NULL tree.

Wireshark version 1.12.x before 1.12.1 on Windows

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://www.osvdb.com/111601
• http://www.osvdb.com/111602
• https://www.wireshark.org/security/wnpa-sec-2014-15.html
• https://www.wireshark.org/security/wnpa-sec-2014-16.html

---

Updated on 2015-03-25