The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was addressed     in epan/dissectors/packet-dof.c by properly handling generated IID and OID bytes. (CVE-2019-10896)

Note that Nessus relies on the presence of the package as reported by the vendor.

Several vulnerabilities were fixed in the Wireshark network protocol analyzer.

CVE-2019-10894

GSS-API dissector crash

CVE-2019-10895

NetScaler file parser crash

CVE-2019-10896

DOF dissector crash

CVE-2019-10899

SRVLOC dissector crash

CVE-2019-10901

LDSS dissector crash

CVE-2019-10903

DCERPC SPOOLSS dissector crash

CVE-2019-12295

Dissection engine could crash

For Debian 9 stretch, these problems have been fixed in version 2.6.8-1.1~deb9u1.

We recommend that you upgrade your wireshark packages.

For the detailed security status of wireshark please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/wireshark

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for wireshark and libmaxminddb fixes the following issues :

Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).

New features include :

Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC

Improved support for existing protocols, like HTTP/2

Improved analytics and usability functionalities

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for wireshark to version 2.4.14 fixes the following issues :

Security issues fixed :

  - CVE-2019-10895: NetScaler file parser crash.

  - CVE-2019-10899: SRVLOC dissector crash.

  - CVE-2019-10894: GSS-API dissector crash.

  - CVE-2019-10896: DOF dissector crash.

  - CVE-2019-10901: LDSS dissector crash.

  - CVE-2019-10903: DCERPC SPOOLSS dissector crash.

  - CVE-2019-9214: Avoided a dereference of a null     coversation which could make RPCAP dissector crash     (bsc#1127367).

  - CVE-2019-9209: Fixed a buffer overflow in time values     which could make ASN.1 BER and related dissectors crash     (bsc#1127369).

  - CVE-2019-9208: Fixed a NULL pointer dereference which     could make TCAP dissector crash (bsc#1127370).

Non-security issue fixed :

  - Update to version 2.4.14 (bsc#1131945).

This update was imported from the SUSE:SLE-12:Update update project.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
222589	Linux Distros Unpatched Vulnerability : CVE-2019-10896	Nessus	Misc.	2025/3/4	2026/7/28	high
142153	Debian DLA-2423-1 : wireshark security update	Nessus	Debian Local Security Checks	2020/11/2	2024/2/13	high
134625	SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2020:0693-1)	Nessus	SuSE Local Security Checks	2020/3/16	2024/3/21	high
125018	openSUSE Security Update : wireshark (openSUSE-2019-1390)	Nessus	SuSE Local Security Checks	2019/5/14	2024/5/22	high

检测

插件搜索

high

high

high

high