SUSE-SU-2026:1169-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20261169-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1169-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:1169-1
Upstream
CVE (18)
Related
CVE (18)
Published
2026-04-02T08:29:30Z
Modified
2026-04-03T07:45:07Z
Summary
Security update for wireshark
Details

This update for wireshark fixes the following issues:

Update Wireshark to version 4.6.4 (jsc#PED-15400).

  • CVE-2024-9780: ITS dissector crash (bsc#1231475).
  • CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash (bsc#1231476).
  • CVE-2024-11595: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (bsc#1233594).
  • CVE-2024-11596: Buffer Over-read in Wireshark (bsc#1233593).
  • CVE-2025-1492: Uncontrolled Recursion in Wireshark (bsc#1237414).
  • CVE-2025-5601: Column handling crashes in Wireshark allows denial of service (bsc#1244081).
  • CVE-2025-9817: NULL Pointer Dereference in ssh dissector (bsc#1249090).
  • CVE-2025-13499: a malformed packet can lead to a Kafka dissector crash (bsc#1254108).
  • CVE-2025-13674: injecting a malformed packet can cause a crash (bsc#1254262).
  • CVE-2025-13945: HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (bsc#1254471).
  • CVE-2025-13946: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service (bsc#1254472).
  • CVE-2026-0959: denial of service via IEEE 802.11 protocol dissector crash (bsc#1256734).
  • CVE-2026-0960: denial of Service via HTTP3 protocol dissector infinite loop (bsc#1256736).
  • CVE-2026-0961: denial of Service vulnerability in BLF file parser (bsc#1256738).
  • CVE-2026-0962: denial of Service via SOME/IP-SD protocol dissector crash (bsc#1256739).
  • CVE-2026-3201: missing limit checks in USB HID protocol dissector's parse_report_descriptor function can lead to memory exhaustion (bsc#1258907).
  • CVE-2026-3202: missing checks in NTS-KE protocol dissector can lead to crash (bsc#1258908).
  • CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory access and crash (bsc#1258909).

Also libvirt was rebuilt against wireshark for the libvirt plugin.

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP7
libvirt

Package

Name
libvirt
Purl
pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
11.0.0-150700.4.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libvirt-libs":  "11.0.0-150700.4.19.1",
            "libwireshark19":  "4.6.4-150700.21.8.1",
            "libwiretap16":  "4.6.4-150700.21.8.1",
            "libwsutil17":  "4.6.4-150700.21.8.1",
            "wireshark":  "4.6.4-150700.21.8.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1169-1.json"
wireshark

Package

Name
wireshark
Purl
pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.6.4-150700.21.8.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libvirt-libs":  "11.0.0-150700.4.19.1",
            "libwireshark19":  "4.6.4-150700.21.8.1",
            "libwiretap16":  "4.6.4-150700.21.8.1",
            "libwsutil17":  "4.6.4-150700.21.8.1",
            "wireshark":  "4.6.4-150700.21.8.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1169-1.json"
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
wireshark

Package

Name
wireshark
Purl
pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.6.4-150700.21.8.1

Ecosystem specific 

{
    "binaries":  [
        {
            "wireshark-devel":  "4.6.4-150700.21.8.1",
            "wireshark-ui-qt":  "4.6.4-150700.21.8.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1169-1.json"
SUSE:Linux Enterprise Module for Server Applications 15 SP7
libvirt

Package

Name
libvirt
Purl
pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
11.0.0-150700.4.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libvirt":  "11.0.0-150700.4.19.1",
            "libvirt-client":  "11.0.0-150700.4.19.1",
            "libvirt-client-qemu":  "11.0.0-150700.4.19.1",
            "libvirt-daemon":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-common":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-config-network":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-config-nwfilter":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-interface":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-libxl":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-network":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-nodedev":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-nwfilter":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-qemu":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-secret":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-storage":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-storage-core":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-storage-disk":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-storage-iscsi":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-storage-iscsi-direct":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-storage-logical":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-storage-mpath":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-storage-rbd":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-driver-storage-scsi":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-hooks":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-lock":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-log":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-plugin-lockd":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-plugin-sanlock":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-proxy":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-qemu":  "11.0.0-150700.4.19.1",
            "libvirt-daemon-xen":  "11.0.0-150700.4.19.1",
            "libvirt-devel":  "11.0.0-150700.4.19.1",
            "libvirt-doc":  "11.0.0-150700.4.19.1",
            "libvirt-nss":  "11.0.0-150700.4.19.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1169-1.json"