UnratedFix available

Security update for wireshark

Type: advisorySources: OSV

This update for wireshark fixes the following issues: Update to Wireshark 4.4.18: - CVE-2026-19694: TTX Logger file parser crash (bsc#1275279). - CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280). - CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281). - CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828). - CVE-2026-76880: RRC protocol dissector crash (bsc#1275829). - CVE-2026-76881: CMS protocol dissector crash (bsc#1275831). - CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832). - CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833). - CVE-2026-76884: ERF file parser crash (bsc#1275834). - CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835). - CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836). - CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838). - CVE-2026-76888: RDP protocol dissector crash (bsc#1275839). - CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840). - CVE-2026-76890: Sharkd utility crash (bsc#1275841). - CVE-2026-76891: Sharkd utility crash (bsc#1275844). - CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842). - CVE-2026-76918: SSH protocol dissector crash (bsc#1275843). - CVE-2026-76919: ESS protocol dissector crash (bsc#1275845). - CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846). - CVE-2026-76921: CMS protocol dissector crash (bsc#1275847). - CVE-2026-76922: Bluetooth BR/EDR FHS protocol

Products: wireshark
Affected versions: Not specified
Fixed versions: 4.4.18-160000.1.1
CVEs: CVE-2026-19694, CVE-2026-19695, CVE-2026-19696, CVE-2026-76879, CVE-2026-76880, CVE-2026-76881, CVE-2026-76882, CVE-2026-76883, CVE-2026-76884, CVE-2026-76885, CVE-2026-76886, CVE-2026-76887, CVE-2026-76888, CVE-2026-76889, CVE-2026-76890, CVE-2026-76891, CVE-2026-76917, CVE-2026-76918, CVE-2026-76919, CVE-2026-76920, CVE-2026-76921, CVE-2026-76922, CVE-2026-76923, CVE-2026-76924, CVE-2026-76926, CVE-2026-76927, CVE-2026-76928, CVE-2026-76929
Confirmed fixed CVEs: Not specified
Updated in this feed: 28 Oct 2026, 12:48 UTC · Revision 1

Source evidence

Security update for wireshark

core-osv · Original source

Published 2 Oct 2026, 16:41 UTC

osv:SUSE-SU-2026:24013-1

wireshark

Fixed versions: 4.4.18-160000.1.1

wireshark

Fixed versions: 4.4.18-160000.1.1

Complete source record

{
  "id": "bbd54a896793fdce21373097ed93834e06e16f61ccec62028ee911bdc1ea8d6a",
  "url": "https://osv.dev/vulnerability/SUSE-SU-2026%3A24013-1",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Security update for wireshark",
    "summary": "This update for wireshark fixes the following issues: Update to Wireshark 4.4.18: - CVE-2026-19694: TTX Logger file parser crash (bsc#1275279). - CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280). - CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281). - CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828). - CVE-2026-76880: RRC protocol dissector crash (bsc#1275829). - CVE-2026-76881: CMS protocol dissector crash (bsc#1275831). - CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832). - CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833). - CVE-2026-76884: ERF file parser crash (bsc#1275834). - CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835). - CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836). - CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838). - CVE-2026-76888: RDP protocol dissector crash (bsc#1275839). - CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840). - CVE-2026-76890: Sharkd utility crash (bsc#1275841). - CVE-2026-76891: Sharkd utility crash (bsc#1275844). - CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842). - CVE-2026-76918: SSH protocol dissector crash (bsc#1275843). - CVE-2026-76919: ESS protocol dissector crash (bsc#1275845). - CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846). - CVE-2026-76921: CMS protocol dissector crash (bsc#1275847). - CVE-2026-76922: Bluetooth BR/EDR FHS protocol",
    "evidence": "osv:SUSE-SU-2026:24013-1",
    "products": [
      {
        "name": {
          "value": "wireshark",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.4.18-160000.1.1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "wireshark",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.4.18-160000.1.1",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "SUSE-SU-2026:24013-1",
      "aliases": [
        "SUSE-SU-2026:24013-1"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "4.4.18-160000.1.1"
                }
              ]
            }
          ],
          "package": {
            "name": "wireshark",
            "purl": "pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Server%2016.0",
            "ecosystem": "SUSE:Linux Enterprise Server 16.0"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:24013-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "wireshark": "4.4.18-160000.1.1",
                "libwsutil16": "4.4.18-160000.1.1",
                "libwiretap15": "4.4.18-160000.1.1",
                "libwireshark18": "4.4.18-160000.1.1",
                "wireshark-devel": "4.4.18-160000.1.1",
                "wireshark-ui-qt": "4.4.18-160000.1.1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "4.4.18-160000.1.1"
                }
              ]
            }
          ],
          "package": {
            "name": "wireshark",
            "purl": "pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0",
            "ecosystem": "SUSE:Linux Enterprise Server for SAP applications 16.0"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:24013-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "wireshark": "4.4.18-160000.1.1",
                "libwsutil16": "4.4.18-160000.1.1",
                "libwiretap15": "4.4.18-160000.1.1",
                "libwireshark18": "4.4.18-160000.1.1",
                "wireshark-devel": "4.4.18-160000.1.1",
                "wireshark-ui-qt": "4.4.18-160000.1.1"
              }
            ]
          }
        }
      ],
      "modified": "2026-10-09T17:23:09.157248881Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-19694",
        "CVE-2026-19695",
        "CVE-2026-19696",
        "CVE-2026-76879",
        "CVE-2026-76880",
        "CVE-2026-76881",
        "CVE-2026-76882",
        "CVE-2026-76883",
        "CVE-2026-76884",
        "CVE-2026-76885",
        "CVE-2026-76886",
        "CVE-2026-76887",
        "CVE-2026-76888",
        "CVE-2026-76889",
        "CVE-2026-76890",
        "CVE-2026-76891",
        "CVE-2026-76917",
        "CVE-2026-76918",
        "CVE-2026-76919",
        "CVE-2026-76920",
        "CVE-2026-76921",
        "CVE-2026-76922",
        "CVE-2026-76923",
        "CVE-2026-76924",
        "CVE-2026-76926",
        "CVE-2026-76927",
        "CVE-2026-76928",
        "CVE-2026-76929"
      ],
      "references": [
        "https://www.suse.com/support/update/announcement/2026/suse-su-202624013-1/",
        "https://bugzilla.suse.com/1275279",
        "https://bugzilla.suse.com/1275280",
        "https://bugzilla.suse.com/1275281",
        "https://bugzilla.suse.com/1275828",
        "https://bugzilla.suse.com/1275829",
        "https://bugzilla.suse.com/1275831",
        "https://bugzilla.suse.com/1275832",
        "https://bugzilla.suse.com/1275833",
        "https://bugzilla.suse.com/1275834",
        "https://bugzilla.suse.com/1275835",
        "https://bugzilla.suse.com/1275836",
        "https://bugzilla.suse.com/1275838",
        "https://bugzilla.suse.com/1275839",
        "https://bugzilla.suse.com/1275840",
        "https://bugzilla.suse.com/1275841",
        "https://bugzilla.suse.com/1275842",
        "https://bugzilla.suse.com/1275843",
        "https://bugzilla.suse.com/1275844",
        "https://bugzilla.suse.com/1275845",
        "https://bugzilla.suse.com/1275846",
        "https://bugzilla.suse.com/1275847",
        "https://bugzilla.suse.com/1275848",
        "https://bugzilla.suse.com/1275849",
        "https://bugzilla.suse.com/1275850",
        "https://bugzilla.suse.com/1275851",
        "https://bugzilla.suse.com/1275852",
        "https://bugzilla.suse.com/1275853",
        "https://bugzilla.suse.com/1275854",
        "https://www.suse.com/security/cve/CVE-2026-19694",
        "https://www.suse.com/security/cve/CVE-2026-19695",
        "https://www.suse.com/security/cve/CVE-2026-19696",
        "https://www.suse.com/security/cve/CVE-2026-76879",
        "https://www.suse.com/security/cve/CVE-2026-76880",
        "https://www.suse.com/security/cve/CVE-2026-76881",
        "https://www.suse.com/security/cve/CVE-2026-76882",
        "https://www.suse.com/security/cve/CVE-2026-76883",
        "https://www.suse.com/security/cve/CVE-2026-76884",
        "https://www.suse.com/security/cve/CVE-2026-76885",
        "https://www.suse.com/security/cve/CVE-2026-76886",
        "https://www.suse.com/security/cve/CVE-2026-76887",
        "https://www.suse.com/security/cve/CVE-2026-76888",
        "https://www.suse.com/security/cve/CVE-2026-76889",
        "https://www.suse.com/security/cve/CVE-2026-76890",
        "https://www.suse.com/security/cve/CVE-2026-76891",
        "https://www.suse.com/security/cve/CVE-2026-76917",
        "https://www.suse.com/security/cve/CVE-2026-76918",
        "https://www.suse.com/security/cve/CVE-2026-76919",
        "https://www.suse.com/security/cve/CVE-2026-76920",
        "https://www.suse.com/security/cve/CVE-2026-76921",
        "https://www.suse.com/security/cve/CVE-2026-76922",
        "https://www.suse.com/security/cve/CVE-2026-76923",
        "https://www.suse.com/security/cve/CVE-2026-76924",
        "https://www.suse.com/security/cve/CVE-2026-76926",
        "https://www.suse.com/security/cve/CVE-2026-76927",
        "https://www.suse.com/security/cve/CVE-2026-76928",
        "https://www.suse.com/security/cve/CVE-2026-76929"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-19694",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-19695",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-19696",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76879",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76880",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76881",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76882",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76883",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76884",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76885",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76886",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76887",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76888",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76889",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76890",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76891",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76917",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76918",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76919",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76920",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76921",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76922",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76923",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76924",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76926",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76927",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76928",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-76929",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 122389,
  "published_at": "2026-10-02T16:41:07+00:00"
}