Azure Linux 3.0 Security Update: wireshark (CVE-2023-6174)

The version of wireshark installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6174 advisory. - SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted...

Wireshark 4.6.x < 4.6.3 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.3. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.3 advisory. - SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of...

Wireshark 4.6.x < 4.6.3 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.6.3. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.3 advisory. - SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service...

MiracleLinux 8 : wireshark-2.6.2-17.el8 (AXSA:2023-7199:03)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-7199:03 advisory. wireshark: RTPS dissector crash CVE-2023-0666 wireshark: VMS TCPIPtrace file parser crash CVE-2023-2856 wireshark: NetScaler file parser crash...

MiracleLinux 9 : wireshark-3.4.10-6.el9 (AXSA:2023-6852:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6852:02 advisory. wireshark: RTPS dissector crash CVE-2023-0666 wireshark: IEEE C37.118 Synchrophasor dissector crash CVE-2023-0668 wireshark: Candump log file parser...

MiracleLinux 4 : wireshark-1.8.10-4.AXS4 (AXSA:2014-031:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-031:01 advisory. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for...

OESA-2026-1058 wireshark security update

Security Fixes: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of serviceCVE-2025-13946...

OESA-2026-1060 wireshark security update

Security Fixes: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of serviceCVE-2025-13946...

OESA-2026-1059 wireshark security update

Security Fixes: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of serviceCVE-2025-13946...

OESA-2026-1061 wireshark security update

Security Fixes: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of serviceCVE-2025-13946...

OESA-2026-1062 wireshark security update

Security Fixes: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of serviceCVE-2025-13946...

MiracleLinux 4 : wireshark-1.8.10-7.AXS4 (AXSA:2014-223:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-223:02 advisory. Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library,...

MiracleLinux 4 : wireshark-1.8.10-8.AXS4 (AXSA:2014-616:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-616:03 advisory. Description : Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004086)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004086 advisory. The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto...

MiracleLinux 3 : wireshark-1.0.15-7.0.1.AXS3 (AXSA:2014-725:02)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-725:02 advisory. Description : Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and...

CVE-2026-0959

A flaw was found in Wireshark. A remote attacker could exploit a crash in the IEEE 802.11 protocol dissector by crafting a malicious network packet. This vulnerability leads to a denial of service, making the Wireshark application unavailable. Mitigation To mitigate this issue, users should avoid...

CVE-2026-0960

A flaw was found in Wireshark. A local user could be affected by a denial of service when opening a specially crafted capture file containing HTTP3 protocol traffic. This vulnerability is caused by an infinite loop within the HTTP3 protocol dissector, leading to the application becoming...

Linux Distros Unpatched Vulnerability : CVE-2026-0960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service CVE-2026-0960 Note that Nessus relies on the presence of the package...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003435 advisory. The skbflowdissect function in net/core/flowdissector.c in the Linux kernel before 4.3 does not ensure that nproto, ipproto, and thoff are initialized, which allows...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001984)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001984 advisory. The skbflowdissect function in net/core/flowdissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service infinite loop via a sma...