The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:0909-1 advisory.

  - Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via     packet injection or crafted capture file. (CVE-2020-26418)

  - Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or     crafted capture file. (CVE-2020-26419)

  - Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via     packet injection or crafted capture file. (CVE-2020-26420)

  - Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8     allows denial of service via packet injection or crafted capture file. (CVE-2020-26421)

  - Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet     injection or crafted capture file (CVE-2020-26422)

  - Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection     or crafted capture file (CVE-2021-22173)

  - Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or     crafted capture file (CVE-2021-22174)

  - Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution     via via packet injection or crafted capture file. (CVE-2021-22191)

  - Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows     denial of service via packet injection or crafted capture file (CVE-2021-22207)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

openSUSE 15 Security Update : wireshark, libvirt, sbc, libqt5-qtmultimedia (openSUSE-SU-2021:0909-1)

high Nessus Plugin ID 151066

Version 1.4

Version 1.3

Version 1.4 Dec 12, 2023, 3:08 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202312121508
Version 1.3 Oct 4, 2022, 9:57 AM IAVM reference Plugin Feed: 202210040957