In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.

This update for wireshark and libmaxminddb fixes the following issues :

Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).

New features include :

  - Added support for 111 new protocols, including     WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC

  - Improved support for existing protocols, like HTTP/2

  - Improved analytics and usability functionalities

This update was imported from the SUSE:SLE-15:Update update project.

This update for wireshark and libmaxminddb fixes the following issues :

Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).

New features include :

Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC

Improved support for existing protocols, like HTTP/2

Improved analytics and usability functionalities

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Wireshark installed on the remote macOS / Mac OS X host is 2.4.x prior to 2.4.10 / 2.6.x prior to 2.6.4. It is, therefore, affected by multiple vulnerabilities.

  - A buffer overflow condition exists in OPC UA applications due to     failure to handle exceptional conditions. An unauthenticated     remote attacker can exploit this via carefully structured requests     to cause a denial of service condition or the execution of     arbitrary code. (CVE-2018-12086)

  - A stack-based buffer overflow condition exists in Liblouis 3.6.0     in the function parseChars in compileTranslationTable.c, a     different vulnerability than CVE-2018-11440 due to failure to     handle exceptional conditions. An unauthenticated remote attacker     can exploit this to cause a denial of service condition or the     execution of arbitrary code. (CVE-2018-12585)

  - Multiple denial of service vulnerabilities exist in the following     protocol dissectors: CoAP, IHS Discovery, the MS-WSP due to     improper handling of exceptional conditions. An unauthenticated     remote attacker can exploit this to cause Wireshark to crash by     injecting a malformed packet onto the wire, or by convincing a     user to read a malformed packet trace file.
    (CVE-2018-18225, CVE-2018-18226, CVE-2018-18227)

New version 2.6.4, contains security fix for CVE-2018-16056, CVE-2018-16057, CVE-2018-16058, CVE-2018-18225, CVE-2018-18226, CVE-2018-18227, CVE-2018-12086.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer, which could result in denial of service or the execution of arbitrary code.

The version of Wireshark installed on the remote Windows host is 2.6.x prior to 2.6.4. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Severity
134755	openSUSE Security Update : wireshark (openSUSE-2020-362)	Nessus	SuSE Local Security Checks	high
134625	SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2020:0693-1)	Nessus	SuSE Local Security Checks	high
121309	Wireshark 2.4.x < 2.4.10 / 2.6.x < 2.6.4 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	high
120589	Fedora 28 : 1:wireshark (2018-89413a04e0)	Nessus	Fedora Local Security Checks	high
119892	Debian DSA-4359-1 : wireshark - security update	Nessus	Debian Local Security Checks	high
118207	Wireshark 2.6.x < 2.6.4 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2018-18226

high

Tenable Plugins

high

high

high

high

high

high