This host is installed with Wireshark and is prone to denial of service vulnerability.

Successful exploitation will allow attacker to cause denial of service attack - via a crafted packet to the RTP dissector. - via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors. Impact Level: Application

Upgrade to Wireshark 1.10.10 or later, For updates refer to https://www.wireshark.org

Flaws exists due to, - the SDP dissector creates duplicate hashtables for a media channel. - the Use-after-free vulnerability in the SDP dissector.

Wireshark version 1.10.x before 1.10.10 on Mac OS X

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://www.osvdb.com/111597
• http://www.osvdb.com/111598
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9920
• https://www.wireshark.org/security/wnpa-sec-2014-12.html

---

Updated on 2015-03-25