rpm package
suse/wireshark&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6
pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6
Vulnerabilities (23)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-11626 | Med | 5.5 | < 4.2.14-150600.18.29.1 | 4.2.14-150600.18.29.1 | Oct 10, 2025 | MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service | |
| CVE-2025-9817 | Hig | 7.8 | < 4.2.13-150600.18.26.1 | 4.2.13-150600.18.26.1 | Sep 3, 2025 | SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service | |
| CVE-2025-5601 | Hig | 7.8 | < 4.2.12-150600.18.23.1 | 4.2.12-150600.18.23.1 | Jun 4, 2025 | Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file | |
| CVE-2025-1492 | Hig | 7.8 | < 4.2.11-150600.18.20.1 | 4.2.11-150600.18.20.1 | Feb 20, 2025 | Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-11596 | Hig | 7.8 | < 4.2.9-150600.18.17.1 | 4.2.9-150600.18.17.1 | Nov 21, 2024 | ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-11595 | Hig | 7.8 | < 4.2.9-150600.18.17.1 | 4.2.9-150600.18.17.1 | Nov 21, 2024 | FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-9781 | Hig | 7.8 | < 4.2.8-150600.18.14.1 | 4.2.8-150600.18.14.1 | Oct 10, 2024 | AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-8645 | Med | 5.5 | < 4.2.7-150600.18.11.1 | 4.2.7-150600.18.11.1 | Sep 10, 2024 | SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-8250 | Hig | 7.8 | < 4.2.7-150600.18.11.1 | 4.2.7-150600.18.11.1 | Aug 29, 2024 | NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-4855 | Low | 3.6 | < 3.6.23-150000.3.115.1 | 3.6.23-150000.3.115.1 | May 14, 2024 | Use after free issue in editcap could cause denial of service via crafted capture file | |
| CVE-2024-4854 | Med | 6.4 | < 3.6.23-150000.3.115.1 | 3.6.23-150000.3.115.1 | May 14, 2024 | MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file | |
| CVE-2024-4853 | Low | 3.6 | < 3.6.23-150000.3.115.1 | 3.6.23-150000.3.115.1 | May 14, 2024 | Memory handling issue in editcap could cause denial of service via crafted capture file | |
| CVE-2024-2955 | Hig | 7.8 | < 4.2.6-150600.18.6.1 | 4.2.6-150600.18.6.1 | Mar 26, 2024 | T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file | |
| CVE-2023-6175 | Hig | 7.8 | < 4.2.6-150600.18.6.1 | 4.2.6-150600.18.6.1 | Mar 26, 2024 | NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file | |
| CVE-2024-0211 | Hig | 7.8 | < 4.2.6-150600.18.6.1 | 4.2.6-150600.18.6.1 | Jan 3, 2024 | DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-0210 | Hig | 7.8 | < 4.2.6-150600.18.6.1 | 4.2.6-150600.18.6.1 | Jan 3, 2024 | Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file | |
| CVE-2024-0207 | Hig | 7.8 | < 4.2.6-150600.18.6.1 | 4.2.6-150600.18.6.1 | Jan 3, 2024 | HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file | |
| CVE-2023-6174 | Med | 6.3 | < 4.2.6-150600.18.6.1 | 4.2.6-150600.18.6.1 | Nov 16, 2023 | SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file | |
| CVE-2023-5371 | Med | 5.3 | < 4.2.6-150600.18.6.1 | 4.2.6-150600.18.6.1 | Oct 4, 2023 | RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file | |
| CVE-2023-3649 | Med | 5.3 | < 4.2.6-150600.18.6.1 | 4.2.6-150600.18.6.1 | Jul 14, 2023 | iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file |
- affected < 4.2.14-150600.18.29.1fixed 4.2.14-150600.18.29.1
MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service
- affected < 4.2.13-150600.18.26.1fixed 4.2.13-150600.18.26.1
SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service
- affected < 4.2.12-150600.18.23.1fixed 4.2.12-150600.18.23.1
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file
- affected < 4.2.11-150600.18.20.1fixed 4.2.11-150600.18.20.1
Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file
- affected < 4.2.9-150600.18.17.1fixed 4.2.9-150600.18.17.1
ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
- affected < 4.2.9-150600.18.17.1fixed 4.2.9-150600.18.17.1
FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
- affected < 4.2.8-150600.18.14.1fixed 4.2.8-150600.18.14.1
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file
- affected < 4.2.7-150600.18.11.1fixed 4.2.7-150600.18.11.1
SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or crafted capture file
- affected < 4.2.7-150600.18.11.1fixed 4.2.7-150600.18.11.1
NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file
- affected < 3.6.23-150000.3.115.1fixed 3.6.23-150000.3.115.1
Use after free issue in editcap could cause denial of service via crafted capture file
- affected < 3.6.23-150000.3.115.1fixed 3.6.23-150000.3.115.1
MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file
- affected < 3.6.23-150000.3.115.1fixed 3.6.23-150000.3.115.1
Memory handling issue in editcap could cause denial of service via crafted capture file
- affected < 4.2.6-150600.18.6.1fixed 4.2.6-150600.18.6.1
T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file
- affected < 4.2.6-150600.18.6.1fixed 4.2.6-150600.18.6.1
NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file
- affected < 4.2.6-150600.18.6.1fixed 4.2.6-150600.18.6.1
DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
- affected < 4.2.6-150600.18.6.1fixed 4.2.6-150600.18.6.1
Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
- affected < 4.2.6-150600.18.6.1fixed 4.2.6-150600.18.6.1
HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file
- affected < 4.2.6-150600.18.6.1fixed 4.2.6-150600.18.6.1
SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file
- affected < 4.2.6-150600.18.6.1fixed 4.2.6-150600.18.6.1
RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file
- affected < 4.2.6-150600.18.6.1fixed 4.2.6-150600.18.6.1
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
Page 1 of 2