Wireshark 4.4.x < 4.4.18 多個弱點 (macOS)

critical Nessus Plugin ID 338411

概要

遠端 macOS / Mac OS X 主機上安裝的應用程式受到多個弱點影響。

說明

遠端 macOS / Mac OS X 主機上安裝的 Wireshark 版本比 4.4.18 舊。因此,會受到 wireshark-4.4.18 公告中所提及的多個弱點影響。

- 4.6.0 至 4.6.7 版和 4.4.0 至 4.4.18 版中的 pcapng 檔案分析程式當機弱點可造成系統拒絕服務 (CVE-2026-76929)

- C12.22 協定剖析器崩潰 4.6.0 to 4.6.7 和 4.4.0 to 4.4.18 允許拒絕服務 (CVE-2026-76879, CVE-2026-76886)

- sharkd 4.6.0 至 4.6.7 版和 4.4.0 至 4.4.18 版中的當機弱點可造成系統拒絕服務(CVE-2026-76890、CVE-2026-76891)

- 4.6.0 至 4.6.7 和 4.4.0 至 4.4.18 版中的 UMTS FP 通訊協定剖析器當機弱點可造成系統拒絕服務 (CVE-2026-76889)

- 4.6.0 至 4.6.7 和 4.4.0 至 4.4.18 版中的 RDP 通訊協定剖析器當機弱點可造成系統拒絕服務 (CVE-2026-76888)

請注意,Nessus 並未測試這些問題,而是僅依據應用程式自我報告的版本號碼作出判斷。

解決方案

升級版本至 Wireshark 4.4.18 或更新版本。

另請參閱

https://gitlab.com/wireshark/wireshark/-/issues/20026

https://gitlab.com/wireshark/wireshark/-/issues/20114

https://gitlab.com/wireshark/wireshark/-/issues/20176

https://gitlab.com/wireshark/wireshark/-/issues/20214

https://gitlab.com/wireshark/wireshark/-/issues/20373

https://gitlab.com/wireshark/wireshark/-/issues/20509

https://gitlab.com/wireshark/wireshark/-/issues/20823

https://gitlab.com/wireshark/wireshark/-/issues/20860

https://gitlab.com/wireshark/wireshark/-/issues/20880

https://gitlab.com/wireshark/wireshark/-/issues/20884

https://gitlab.com/wireshark/wireshark/-/issues/20939

https://gitlab.com/wireshark/wireshark/-/issues/20945

https://gitlab.com/wireshark/wireshark/-/issues/20972

https://gitlab.com/wireshark/wireshark/-/issues/21009

https://gitlab.com/wireshark/wireshark/-/issues/21066

https://gitlab.com/wireshark/wireshark/-/issues/21067

https://gitlab.com/wireshark/wireshark/-/issues/21070

https://gitlab.com/wireshark/wireshark/-/issues/21073

https://gitlab.com/wireshark/wireshark/-/issues/21077

https://gitlab.com/wireshark/wireshark/-/issues/21088

https://gitlab.com/wireshark/wireshark/-/issues/21094

https://gitlab.com/wireshark/wireshark/-/issues/21097

https://gitlab.com/wireshark/wireshark/-/issues/21098

https://gitlab.com/wireshark/wireshark/-/issues/21103

https://gitlab.com/wireshark/wireshark/-/issues/21105

https://gitlab.com/wireshark/wireshark/-/issues/21111

https://gitlab.com/wireshark/wireshark/-/issues/21113

https://gitlab.com/wireshark/wireshark/-/issues/21115

https://gitlab.com/wireshark/wireshark/-/issues/21120

https://gitlab.com/wireshark/wireshark/-/issues/21121

https://gitlab.com/wireshark/wireshark/-/issues/21122

https://gitlab.com/wireshark/wireshark/-/issues/21125

https://gitlab.com/wireshark/wireshark/-/issues/21127

https://gitlab.com/wireshark/wireshark/-/issues/21128

https://gitlab.com/wireshark/wireshark/-/issues/21129

https://gitlab.com/wireshark/wireshark/-/issues/21130

https://gitlab.com/wireshark/wireshark/-/issues/21139

https://gitlab.com/wireshark/wireshark/-/issues/21144

https://gitlab.com/wireshark/wireshark/-/issues/21145

https://gitlab.com/wireshark/wireshark/-/issues/21149

https://gitlab.com/wireshark/wireshark/-/issues/21172

https://gitlab.com/wireshark/wireshark/-/issues/21177

https://gitlab.com/wireshark/wireshark/-/issues/21181

https://gitlab.com/wireshark/wireshark/-/issues/21182

https://gitlab.com/wireshark/wireshark/-/issues/21184

https://gitlab.com/wireshark/wireshark/-/issues/21185

https://gitlab.com/wireshark/wireshark/-/issues/21186

https://gitlab.com/wireshark/wireshark/-/issues/21188

https://gitlab.com/wireshark/wireshark/-/issues/21189

https://gitlab.com/wireshark/wireshark/-/issues/21190

https://gitlab.com/wireshark/wireshark/-/issues/21191

https://gitlab.com/wireshark/wireshark/-/issues/21206

https://gitlab.com/wireshark/wireshark/-/issues/21207

https://gitlab.com/wireshark/wireshark/-/issues/21214

https://gitlab.com/wireshark/wireshark/-/issues/21270

https://gitlab.com/wireshark/wireshark/-/issues/21275

https://gitlab.com/wireshark/wireshark/-/issues/21277

https://gitlab.com/wireshark/wireshark/-/issues/21330

https://gitlab.com/wireshark/wireshark/-/issues/21347

https://gitlab.com/wireshark/wireshark/-/issues/21352

https://gitlab.com/wireshark/wireshark/-/issues/21361

https://gitlab.com/wireshark/wireshark/-/issues/21375

https://gitlab.com/wireshark/wireshark/-/issues/21378

https://gitlab.com/wireshark/wireshark/-/issues/21383'

https://gitlab.com/wireshark/wireshark/-/issues/21391

https://gitlab.com/wireshark/wireshark/-/issues/21395

https://gitlab.com/wireshark/wireshark/-/issues/21396

https://gitlab.com/wireshark/wireshark/-/issues/21397

https://gitlab.com/wireshark/wireshark/-/issues/21398

https://gitlab.com/wireshark/wireshark/-/issues/21399

https://gitlab.com/wireshark/wireshark/-/issues/21413

https://gitlab.com/wireshark/wireshark/-/issues/21414

https://gitlab.com/wireshark/wireshark/-/issues/21415

https://gitlab.com/wireshark/wireshark/-/issues/21424

https://gitlab.com/wireshark/wireshark/-/issues/21427

https://gitlab.com/wireshark/wireshark/-/issues/21435

https://gitlab.com/wireshark/wireshark/-/issues/21439

https://gitlab.com/wireshark/wireshark/-/issues/21446

https://gitlab.com/wireshark/wireshark/-/issues/21447

https://gitlab.com/wireshark/wireshark/-/issues/21449

https://gitlab.com/wireshark/wireshark/-/issues/21451

https://gitlab.com/wireshark/wireshark/-/issues/21452

https://gitlab.com/wireshark/wireshark/-/issues/21454

https://gitlab.com/wireshark/wireshark/-/issues/21457

https://gitlab.com/wireshark/wireshark/-/issues/21458

https://gitlab.com/wireshark/wireshark/-/issues/21460

https://gitlab.com/wireshark/wireshark/-/issues/21465

https://gitlab.com/wireshark/wireshark/-/issues/21467

https://gitlab.com/wireshark/wireshark/-/issues/21469

https://gitlab.com/wireshark/wireshark/-/issues/21478

https://gitlab.com/wireshark/wireshark/-/issues/21480

https://gitlab.com/wireshark/wireshark/-/issues/21488

https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html

https://www.wireshark.org/security/wnpa-sec-2024-12

https://www.wireshark.org/security/wnpa-sec-2024-13

https://www.wireshark.org/security/wnpa-sec-2024-14

https://www.wireshark.org/security/wnpa-sec-2024-15

https://www.wireshark.org/security/wnpa-sec-2025-01

https://www.wireshark.org/security/wnpa-sec-2025-02

https://www.wireshark.org/security/wnpa-sec-2025-06

https://www.wireshark.org/security/wnpa-sec-2025-07

https://www.wireshark.org/security/wnpa-sec-2025-08

https://www.wireshark.org/security/wnpa-sec-2026-01

https://www.wireshark.org/security/wnpa-sec-2026-02

https://www.wireshark.org/security/wnpa-sec-2026-03

https://www.wireshark.org/security/wnpa-sec-2026-05

https://www.wireshark.org/security/wnpa-sec-2026-07

https://www.wireshark.org/security/wnpa-sec-2026-08

https://www.wireshark.org/security/wnpa-sec-2026-09

https://www.wireshark.org/security/wnpa-sec-2026-10

https://www.wireshark.org/security/wnpa-sec-2026-11

https://www.wireshark.org/security/wnpa-sec-2026-12

https://www.wireshark.org/security/wnpa-sec-2026-13

https://www.wireshark.org/security/wnpa-sec-2026-15

https://www.wireshark.org/security/wnpa-sec-2026-16

https://www.wireshark.org/security/wnpa-sec-2026-17

https://www.wireshark.org/security/wnpa-sec-2026-18

https://www.wireshark.org/security/wnpa-sec-2026-20

https://www.wireshark.org/security/wnpa-sec-2026-21

https://www.wireshark.org/security/wnpa-sec-2026-22

https://www.wireshark.org/security/wnpa-sec-2026-23

https://www.wireshark.org/security/wnpa-sec-2026-24

https://www.wireshark.org/security/wnpa-sec-2026-26

https://www.wireshark.org/security/wnpa-sec-2026-27

https://www.wireshark.org/security/wnpa-sec-2026-28

https://www.wireshark.org/security/wnpa-sec-2026-29

https://www.wireshark.org/security/wnpa-sec-2026-30

https://www.wireshark.org/security/wnpa-sec-2026-31

https://www.wireshark.org/security/wnpa-sec-2026-32

https://www.wireshark.org/security/wnpa-sec-2026-34

https://www.wireshark.org/security/wnpa-sec-2026-37

https://www.wireshark.org/security/wnpa-sec-2026-38

https://www.wireshark.org/security/wnpa-sec-2026-39

https://www.wireshark.org/security/wnpa-sec-2026-40

https://www.wireshark.org/security/wnpa-sec-2026-41

https://www.wireshark.org/security/wnpa-sec-2026-42

https://www.wireshark.org/security/wnpa-sec-2026-43

https://www.wireshark.org/security/wnpa-sec-2026-44

https://www.wireshark.org/security/wnpa-sec-2026-45

https://www.wireshark.org/security/wnpa-sec-2026-46

https://www.wireshark.org/security/wnpa-sec-2026-47

https://www.wireshark.org/security/wnpa-sec-2026-48

https://www.wireshark.org/security/wnpa-sec-2026-49

https://www.wireshark.org/security/wnpa-sec-2026-50

https://www.wireshark.org/security/wnpa-sec-2026-52

https://www.wireshark.org/security/wnpa-sec-2026-54

https://www.wireshark.org/security/wnpa-sec-2026-55

https://www.wireshark.org/security/wnpa-sec-2026-57

https://www.wireshark.org/security/wnpa-sec-2026-58

https://www.wireshark.org/security/wnpa-sec-2026-59

https://www.wireshark.org/security/wnpa-sec-2026-60

https://www.wireshark.org/security/wnpa-sec-2026-61

https://www.wireshark.org/security/wnpa-sec-2026-62

https://www.wireshark.org/security/wnpa-sec-2026-63

https://www.wireshark.org/security/wnpa-sec-2026-64

https://www.wireshark.org/security/wnpa-sec-2026-65

https://www.wireshark.org/security/wnpa-sec-2026-66

https://www.wireshark.org/security/wnpa-sec-2026-67

https://www.wireshark.org/security/wnpa-sec-2026-69

https://www.wireshark.org/security/wnpa-sec-2026-70

https://www.wireshark.org/security/wnpa-sec-2026-71

https://www.wireshark.org/security/wnpa-sec-2026-72

https://www.wireshark.org/security/wnpa-sec-2026-73

https://www.wireshark.org/security/wnpa-sec-2026-74

https://www.wireshark.org/security/wnpa-sec-2026-75

https://www.wireshark.org/security/wnpa-sec-2026-76

https://www.wireshark.org/security/wnpa-sec-2026-77

https://www.wireshark.org/security/wnpa-sec-2026-78

https://www.wireshark.org/security/wnpa-sec-2026-79

https://www.wireshark.org/security/wnpa-sec-2026-80

https://www.wireshark.org/security/wnpa-sec-2026-81

https://www.wireshark.org/security/wnpa-sec-2026-83

https://www.wireshark.org/security/wnpa-sec-2026-84

https://www.wireshark.org/security/wnpa-sec-2026-85

https://www.wireshark.org/security/wnpa-sec-2026-86

https://www.wireshark.org/security/wnpa-sec-2026-87

https://www.wireshark.org/security/wnpa-sec-2026-88

https://www.wireshark.org/security/wnpa-sec-2026-89

https://www.wireshark.org/security/wnpa-sec-2026-91

Plugin 詳細資訊

嚴重性: Critical

ID: 338411

檔案名稱: macosx_wireshark_4_4_18.nasl

版本: 1.7

類型: Local

代理程式: macosx

已發布: 2026/8/20

已更新: 2026/9/3

支援的感應器: Frictionless Assessment Agent, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

風險資訊

VPR

風險因素: Medium

分數: 4.9

百分位數: 58.04

CVSS v2

風險因素: Critical

基本分數: 10

時間性分數: 7.8

媒介: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS 評分資料來源: CVE-2026-76886

CVSS v3

風險因素: Critical

基本分數: 9.8

時間性分數: 8.8

媒介: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

時間媒介: CVSS:3.0/E:P/RL:O/RC:C

弱點資訊

CPE: cpe:/a:wireshark:wireshark

必要的 KB 項目: Host/local_checks_enabled, Host/MacOSX/Version, installed_sw/Wireshark

可被惡意程式利用: true

可輕鬆利用: Exploits are available

修補程式發佈日期: 2024/10/8

弱點發布日期: 2024/10/8

參考資訊

CVE: CVE-2024-11595, CVE-2024-11596, CVE-2024-9780, CVE-2024-9781, CVE-2025-13499, CVE-2025-13945, CVE-2025-13946, CVE-2025-1492, CVE-2025-5601, CVE-2026-0959, CVE-2026-0961, CVE-2026-0962, CVE-2026-15163, CVE-2026-15164, CVE-2026-15166, CVE-2026-15167, CVE-2026-15168, CVE-2026-15169, CVE-2026-15170, CVE-2026-15171, CVE-2026-15172, CVE-2026-15174, CVE-2026-3201, CVE-2026-3203, CVE-2026-5299, CVE-2026-5401, CVE-2026-5403, CVE-2026-5404, CVE-2026-5405, CVE-2026-5406, CVE-2026-5407, CVE-2026-5408, CVE-2026-5409, CVE-2026-5653, CVE-2026-5654, CVE-2026-5656, CVE-2026-5657, CVE-2026-6519, CVE-2026-6520, CVE-2026-6521, CVE-2026-6522, CVE-2026-6523, CVE-2026-6524, CVE-2026-6527, CVE-2026-6529, CVE-2026-6530, CVE-2026-6531, CVE-2026-6532, CVE-2026-6533, CVE-2026-6534, CVE-2026-6535, CVE-2026-6537, CVE-2026-6538, CVE-2026-6867, CVE-2026-6868, CVE-2026-6869, CVE-2026-6870, CVE-2026-7375, CVE-2026-7376, CVE-2026-7378, CVE-2026-7379, CVE-2026-76879, CVE-2026-76880, CVE-2026-76881, CVE-2026-76882, CVE-2026-76883, CVE-2026-76884, CVE-2026-76885, CVE-2026-76886, CVE-2026-76887, CVE-2026-76888, CVE-2026-76889, CVE-2026-76890, CVE-2026-76891, CVE-2026-76917, CVE-2026-76918, CVE-2026-76919, CVE-2026-76920, CVE-2026-76921, CVE-2026-76922, CVE-2026-76923, CVE-2026-76924, CVE-2026-76926, CVE-2026-76927, CVE-2026-76928, CVE-2026-76929

IAVB: 2024-B-0153-S, 2024-B-0185-S, 2025-B-0029-S, 2025-B-0086-S, 2025-B-0197-S, 2026-B-0022-S, 2026-B-0053-S, 2026-B-0112-S, 2026-B-0191-S, 2026-B-0239