The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3165-1 advisory.

    wireshark was updated from version 3.6.23 to version 4.2.6 (jsc#PED-8517):

    - Security issues fixed with this update:

      * CVE-2024-0207: HTTP3 dissector crash (bsc#1218503)
      * CVE-2024-0210: Zigbee TLV dissector crash (bsc#1218506)
      * CVE-2024-0211: DOCSIS dissector crash (bsc#1218507)
      * CVE-2023-6174: Fixed SSH dissector crash (bsc#1217247)
      * CVE-2023-6175: NetScreen file parser crash (bsc#1217272)
      * CVE-2023-5371: RTPS dissector memory leak (bsc#1215959)
      * CVE-2023-3649: iSCSI dissector crash (bsc#1213318)
      * CVE-2023-2854: BLF file parser crash (bsc#1211708)
      * CVE-2023-0666: RTPS dissector crash (bsc#1211709)
      * CVE-2023-0414: EAP dissector crash (bsc#1207666)

    - Major changes introduced with versions 4.2.0 and 4.0.0:

      * Version 4.2.0 https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
      * Version 4.0.0 https://www.wireshark.org/docs/relnotes/wireshark-4.0.0.html

    - Added an aditional desktopfile to start wireshark which asks for       the super user password.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 3.6.19. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.6.19 advisory.

  - The NetScreen file parser could crash. It may be possible to make Wireshark crash by injecting a malformed     packet onto the wire or by convincing someone to read a malformed packet trace file. (wireshark-bug-19404)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.6.19. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.6.19 advisory.

  - The NetScreen file parser could crash. It may be possible to make Wireshark crash by injecting a malformed     packet onto the wire or by convincing someone to read a malformed packet trace file. (wireshark-bug-19404)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fdc7dfb959 advisory.

    New version 4.0.12. Includes fixes for CVE-2023-5371, CVE-2023-6174, CVE-2023-6175, CVE-2024-0208.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
206878	SUSE SLED15: libwireshark17 / libwiretap14 / libwsutil15 / wireshark / etc (SUSE-SU-2024:3165-1)	Nessus	SuSE Local Security Checks	2024/9/10	2026/6/26	high
185771	Wireshark 3.6.x < 3.6.19 A Vulnerability	Nessus	Windows	2023/11/15	2026/3/30	high
185772	Wireshark 3.6.x < 3.6.19 A Vulnerability (macOS)	Nessus	MacOS X Local Security Checks	2023/11/15	2026/3/30	high
190389	Fedora 38 : wireshark (2024-fdc7dfb959)	Nessus	Fedora Local Security Checks	2024/2/11	2025/4/17	high

检测

插件搜索

high

high

high

high