This Solaris system is missing necessary patches to address critical security updates :

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.6.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.13 advisory.

  - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1992)

  - LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1993)

  - GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet     injection or crafted capture file (CVE-2023-1994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.5 advisory.

  - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1992)

  - LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1993)

  - GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet     injection or crafted capture file (CVE-2023-1994)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1931-1 advisory.

    - CVE-2023-1992: Fixed RPCoRDMA dissector crash (bsc#1210405).
    - CVE-2023-1993: Fixed LISP dissector large loop (bsc#1210404).
    - CVE-2023-1994: Fixed GQUIC dissector crash (bsc#1210403).

    Update to 3.6.13:

    - Further features, bug fixes and updated protocol support as listed in:
      https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
178626	Oracle Solaris Critical Patch Update : jul2023_SRU11_4_58_144_3	Nessus	Solaris Local Security Checks	2023/7/20	2025/10/21	critical
174235	Wireshark 3.6.x < 3.6.13 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2023/4/13	2026/3/30	high
174239	Wireshark 4.0.x < 4.0.5 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2023/4/13	2026/3/30	high
174609	SUSE SLED15: libwireshark15 / libwiretap12 / libwsutil13 / wireshark / etc (SUSE-SU-2023:1931-1)	Nessus	SuSE Local Security Checks	2023/4/21	2026/6/25	high

检测

插件搜索

critical

high

high

high