The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.4.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.4.11 advisory.

  - Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection     or crafted capture file (CVE-2021-4186)

  - Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via     packet injection or crafted capture file (CVE-2021-4181)

  - Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet     injection or crafted capture file (CVE-2021-4182)

  - Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of     service via packet injection or crafted capture file (CVE-2021-4184)

  - Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via     packet injection or crafted capture file (CVE-2021-4185)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0375-1 advisory.

  - Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via     packet injection or crafted capture file (CVE-2021-4181)

  - Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet     injection or crafted capture file (CVE-2021-4182)

  - Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file     (CVE-2021-4183)

  - Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of     service via packet injection or crafted capture file (CVE-2021-4184)

  - Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via     packet injection or crafted capture file (CVE-2021-4185)

  - Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or     crafted capture file (CVE-2021-4190)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the wireshark package has been released.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0375-1 advisory.

  - Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via     packet injection or crafted capture file (CVE-2021-4181)

  - Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet     injection or crafted capture file (CVE-2021-4182)

  - Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file     (CVE-2021-4183)

  - Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of     service via packet injection or crafted capture file (CVE-2021-4184)

  - Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via     packet injection or crafted capture file (CVE-2021-4185)

  - Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or     crafted capture file (CVE-2021-4190)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777370059 advisory.

  - Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via     packet injection or crafted capture file (CVE-2021-4181)

  - Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet     injection or crafted capture file (CVE-2021-4182)

  - Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of     service via packet injection or crafted capture file (CVE-2021-4184)

  - Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection     or crafted capture file (CVE-2021-4186)

  - Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or     crafted capture file (CVE-2021-4190)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-038 advisory.

    A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in     the IPPUSB dissector can cause a denial of service via a packet injection or a crafted capture file.
    (CVE-2021-39920)

    A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in     the Modbus dissector can cause a denial of service via a packet injection or crafted capture file.
    (CVE-2021-39921)

    A flaw was found in Wireshark. A process failure on crafted or malformed ANSI C12.22  input can cause a     denial of service via packet injection or a crafted capture file. (CVE-2021-39922)

    A flaw was found in Wireshark. A process failure consumes excessive CPU resources on crafted or malformed     PNRP input and can cause a denial of service. (CVE-2021-39923)

    A flaw was found in Wireshark. A process failure on crafted or malformed Bluetooth DHT input can cause a     denial of service via packet injection or a crafted capture file. (CVE-2021-39924)

    A flaw was found in Wireshark. A process failure on crafted or malformed Bluetooth SDP input can cause a     denial of service via packet injection or a crafted capture file. (CVE-2021-39925)

    A flaw was found in Wireshark. A process failure on crafted or malformed HCI_ISO input can cause a denial     of service via packet injection or a crafted capture file. (CVE-2021-39926)

    A flaw was found in Wireshark. A process failure on crafted or malformed IEEE 802.11 input can cause a     denial of service via packet injection or a crafted capture file. (CVE-2021-39928)

    A flaw was found in Wireshark.  A process failure on crafted or malformed  Bluetooth DHT input can cause a     denial of service. (CVE-2021-39929)

    A denial of service via packet injection flaw was found in wireshark. An attacker with local network     access could pass specially crafted capture files causing an application to halt or crash, leading to a     denial of service. (CVE-2021-4181)

    A parser infinite-loop flaw was found in wireshark. An attacker with local network access could pass     specially crafted capture files causing an application to halt, crash, or infinite loop. (CVE-2021-4182)

    An infinite-loop flaw was found in Wireshark's DHT dissector module. This flaw allows an attacker with     local network access to pass specially crafted capture files, causing an application to halt, crash or go     into an infinite loop. (CVE-2021-4184)

    An infinite-loop flaw was found in Wireshark RTMPT. This flaw allows an attacker with local network access     to pass specially crafted capture files, causing an application to halt, crash, or go into an infinite     loop. (CVE-2021-4185)

    A segmentation issue was found in Wireshark. This flaw allows an attacker with local network access to     pass specially crafted capture files, causing an application to halt or crash. (CVE-2021-4186)

    An infinite-loop flaw was found in Wireshark. This flaw allows an attacker with local network access to     pass specially crafted capture files, causing an application to halt, crash, or go into an infinite loop.
    (CVE-2021-4190)

    Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of     service via packet injection or crafted capture file (CVE-2022-0581)

    Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows     denial of service via packet injection or crafted capture file (CVE-2022-0582)

    Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of     service via packet injection or crafted capture file (CVE-2022-0583)

    Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial     of service via packet injection or crafted capture file (CVE-2022-0585)

    Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of     service via packet injection or crafted capture file (CVE-2022-0586)

    Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to     3.4.15 allows denial of service via packet injection or crafted capture file. (CVE-2022-3190)

    Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet     injection or crafted capture file (CVE-2022-3725)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
156389	Wireshark 3.4.x < 3.4.11 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2021/12/29	2026/9/22	high
158062	SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2022:0375-1)	Nessus	SuSE Local Security Checks	2022/2/15	2023/7/13	high
203827	Photon OS 3.0: Wireshark PHSA-2022-3.0-0352	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	high
158058	openSUSE 15 Security Update : wireshark (openSUSE-SU-2022:0375-1)	Nessus	SuSE Local Security Checks	2022/2/15	2023/11/9	high
362184	AlmaLinux 9.2 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777370059)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	high
173123	Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-038)	Nessus	Amazon Linux Local Security Checks	2023/3/21	2024/12/11	critical

偵測

搜尋 Plugin

high

high

high

high

high

critical