SUSE-SU-2026:3994-1

Опубликовано: 07 сент. 2026

Источник: suse-cvrf

Описание

Security update for wireshark

This update for wireshark fixes the following issues:

CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops (bsc#1271133).
CVE-2026-15164: Denial of Service vulnerability in ciscodump (bsc#1271134).
CVE-2026-15166: Denial of Service via IEEE 802.11 protocol dissector crash (bsc#1271136).
CVE-2026-15167: Denial of Service via DBS Etherwatch file parser crash (bsc#1271137).
CVE-2026-15168: BLF file parser allows possible information disclosure (bsc#1271138).
CVE-2026-15169: Denial of Service via UMTS FP protocol dissector crash (bsc#1271139).
CVE-2026-15170: Denial of service via Z39.50 protocol dissector crash (bsc#1271140).
CVE-2026-15171: Denial of service via SSH protocol dissector crash (bsc#1271141).
CVE-2026-15172: Denial of service via FMP/NOTIFY protocol dissector crash (bsc#1271142).
CVE-2026-15174: Denial of Service via Catapult DCT2000 protocol dissector crash (bsc#1271144).

Список пакетов

SUSE Linux Enterprise Server 15 SP6-LTSS

libwireshark17-4.2.14-150600.18.44.1

libwiretap14-4.2.14-150600.18.44.1

libwsutil15-4.2.14-150600.18.44.1

wireshark-4.2.14-150600.18.44.1

wireshark-devel-4.2.14-150600.18.44.1

wireshark-ui-qt-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

libwireshark17-4.2.14-150600.18.44.1

libwiretap14-4.2.14-150600.18.44.1

libwsutil15-4.2.14-150600.18.44.1

wireshark-4.2.14-150600.18.44.1

wireshark-devel-4.2.14-150600.18.44.1

wireshark-ui-qt-4.2.14-150600.18.44.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20263994-1/
Link for SUSE-SU-2026:3994-1
https://lists.suse.com/pipermail/sle-security-updates/2026-September/028896.html
E-Mail link for SUSE-SU-2026:3994-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1271133
SUSE Bug 1271133
https://bugzilla.suse.com/1271134
SUSE Bug 1271134
https://bugzilla.suse.com/1271136
SUSE Bug 1271136
https://bugzilla.suse.com/1271137
SUSE Bug 1271137
https://bugzilla.suse.com/1271138
SUSE Bug 1271138
https://bugzilla.suse.com/1271139
SUSE Bug 1271139
https://bugzilla.suse.com/1271140
SUSE Bug 1271140
https://bugzilla.suse.com/1271141
SUSE Bug 1271141
https://bugzilla.suse.com/1271142
SUSE Bug 1271142
https://bugzilla.suse.com/1271144
SUSE Bug 1271144
https://www.suse.com/security/cve/CVE-2026-15163/
SUSE CVE CVE-2026-15163 page
https://www.suse.com/security/cve/CVE-2026-15164/
SUSE CVE CVE-2026-15164 page
https://www.suse.com/security/cve/CVE-2026-15166/
SUSE CVE CVE-2026-15166 page
https://www.suse.com/security/cve/CVE-2026-15167/
SUSE CVE CVE-2026-15167 page
https://www.suse.com/security/cve/CVE-2026-15168/
SUSE CVE CVE-2026-15168 page
https://www.suse.com/security/cve/CVE-2026-15169/
SUSE CVE CVE-2026-15169 page
https://www.suse.com/security/cve/CVE-2026-15170/
SUSE CVE CVE-2026-15170 page

Описание

Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service

Затронутые продукты

SUSE Linux Enterprise Server 15 SP6-LTSS:libwireshark17-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwiretap14-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwsutil15-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:wireshark-4.2.14-150600.18.44.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-15163.html
CVE-2026-15163
https://bugzilla.suse.com/1271133
SUSE Bug 1271133

Описание

Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

Затронутые продукты

SUSE Linux Enterprise Server 15 SP6-LTSS:libwireshark17-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwiretap14-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwsutil15-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:wireshark-4.2.14-150600.18.44.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-15164.html
CVE-2026-15164
https://bugzilla.suse.com/1271134
SUSE Bug 1271134

Описание

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

Затронутые продукты

SUSE Linux Enterprise Server 15 SP6-LTSS:libwireshark17-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwiretap14-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwsutil15-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:wireshark-4.2.14-150600.18.44.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-15166.html
CVE-2026-15166
https://bugzilla.suse.com/1271136
SUSE Bug 1271136

Описание

DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

Затронутые продукты

SUSE Linux Enterprise Server 15 SP6-LTSS:libwireshark17-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwiretap14-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwsutil15-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:wireshark-4.2.14-150600.18.44.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-15167.html
CVE-2026-15167
https://bugzilla.suse.com/1271137
SUSE Bug 1271137

Описание

BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure

Затронутые продукты

SUSE Linux Enterprise Server 15 SP6-LTSS:libwireshark17-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwiretap14-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwsutil15-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:wireshark-4.2.14-150600.18.44.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-15168.html
CVE-2026-15168
https://bugzilla.suse.com/1271138
SUSE Bug 1271138

Описание

UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

Затронутые продукты

SUSE Linux Enterprise Server 15 SP6-LTSS:libwireshark17-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwiretap14-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwsutil15-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:wireshark-4.2.14-150600.18.44.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-15169.html
CVE-2026-15169
https://bugzilla.suse.com/1271139
SUSE Bug 1271139

Описание

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

Затронутые продукты

SUSE Linux Enterprise Server 15 SP6-LTSS:libwireshark17-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwiretap14-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwsutil15-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:wireshark-4.2.14-150600.18.44.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-15170.html
CVE-2026-15170
https://bugzilla.suse.com/1271140
SUSE Bug 1271140

Описание

SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

Затронутые продукты

SUSE Linux Enterprise Server 15 SP6-LTSS:libwireshark17-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwiretap14-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwsutil15-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:wireshark-4.2.14-150600.18.44.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-15171.html
CVE-2026-15171
https://bugzilla.suse.com/1271141
SUSE Bug 1271141

Описание

FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

Затронутые продукты

SUSE Linux Enterprise Server 15 SP6-LTSS:libwireshark17-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwiretap14-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwsutil15-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:wireshark-4.2.14-150600.18.44.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-15172.html
CVE-2026-15172
https://bugzilla.suse.com/1271142
SUSE Bug 1271142

Описание

Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

Затронутые продукты

SUSE Linux Enterprise Server 15 SP6-LTSS:libwireshark17-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwiretap14-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:libwsutil15-4.2.14-150600.18.44.1

SUSE Linux Enterprise Server 15 SP6-LTSS:wireshark-4.2.14-150600.18.44.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-15174.html
CVE-2026-15174
https://bugzilla.suse.com/1271144
SUSE Bug 1271144

SUSE-SU-2026:3994-1

Описание

Список пакетов

SUSE Linux Enterprise Server 15 SP6-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP6

Ссылки

Уязвимость: CVE-2026-15163

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-15164

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-15166

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-15167

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-15168

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-15169

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-15170

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-15171

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-15172

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-15174

Описание

Затронутые продукты

Ссылки