The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:01968-1 advisory.

    - CVE-2025-5601: Dissection engine crash (bsc#1244081).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02271-1 advisory.

    - CVE-2025-5601: Dissection engine crash (bsc#1244081).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of wireshark installed on the remote host is prior to 2.6.2-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3208 advisory.

    ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

    Memory handling issue in editcap could cause denial of service via crafted capture file (CVE-2024-4853)

    MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service     (CVE-2025-13946)

    Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via     packet injection or crafted capture file (CVE-2025-5601)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1775039763 advisory.

  - NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via     crafted capture file (CVE-2023-6175)

  - GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via     packet injection or crafted capture file (CVE-2024-0208)

  - IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of     service via packet injection or crafted capture file (CVE-2024-0209)

  - DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-0211)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0427 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-5601:
    Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via     packet injection or crafted capture file

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.4.17. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.17 advisory.

  - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service (CVE-2026-7379)

  - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and     possible code execution (CVE-2026-5656)

  - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service     via packet injection or crafted capture file (CVE-2024-11595)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

  - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-9780)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8043d4cd71 advisory.

    New version 4.4.7

    ----

    Ignoring potential error when using udevadm in %post scriptlet

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the wireshark package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via     packet injection or crafted capture file (CVE-2025-5601)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
240749	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wireshark (SUSE-SU-2025:01968-1)	Nessus	SuSE Local Security Checks	2025/6/27	2026/1/21	high
242014	SUSE SLES12: libwireshark9 / libwiretap7 / libwscodecs1 / libwsutil8 / wireshark / etc (SUSE-SU-2025:02271-1)	Nessus	SuSE Local Security Checks	2025/7/12	2026/6/25	medium
303085	Amazon Linux 2 : wireshark, --advisory ALAS2-2026-3208 (ALAS-2026-3208)	Nessus	Amazon Linux Local Security Checks	2026/3/19	2026/3/20	medium
361844	AlmaLinux 9.2 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1775039763)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/2	high
275949	TencentOS Server 4: wireshark (TSSA-2025:0427)	Nessus	Tencent Local Security Checks	2025/11/20	2026/3/11	medium
349193	Wireshark 4.4.x < 4.4.17 Multiple Vulnerabilities	Nessus	Windows	2026/9/23	2026/9/24	high
238474	Fedora 41 : wireshark (2025-8043d4cd71)	Nessus	Fedora Local Security Checks	2025/6/15	2026/1/21	high
240518	Photon OS 4.0: Wireshark PHSA-2025-4.0-0818	Nessus	PhotonOS Local Security Checks	2025/6/25	2026/11/2	medium
258436	Linux Distros Unpatched Vulnerability : CVE-2025-5601	Nessus	Misc.	2025/8/30	2026/11/5	medium

偵測

搜尋 Plugin

high

medium

medium

high

medium

high

high

medium

medium