The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.4.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.4.8 advisory.

  - In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was     addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read. (CVE-2018-14370)

  - In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go     into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that     are too long. (CVE-2018-14368)

  - In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an     infinite loop. This was addressed in epan/proto.c by adding offset and length validation. (CVE-2018-14339)

  - In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib     decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid     a buffer over-read. (CVE-2018-14340)

  - In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a     large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset     overflow. (CVE-2018-14341)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for wireshark and libmaxminddb fixes the following issues :

Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).

New features include :

  - Added support for 111 new protocols, including     WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC

  - Improved support for existing protocols, like HTTP/2

  - Improved analytics and usability functionalities

This update was imported from the SUSE:SLE-15:Update update project.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
311413	Wireshark 2.4.x < 2.4.8 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2026/5/1	2026/10/12	high
134755	openSUSE Security Update : wireshark (openSUSE-2020-362)	Nessus	SuSE Local Security Checks	2020/3/20	2024/3/21	high

検出

プラグインの検索

high

high