Linux · SUSE Linux Enterprise · Security advisory · August 5, 2026

SUSE-SU-2026:23147-1: wireshark security update

SUSE-SU-2026:23147-1, released August 5, 2026, fixes 16 CVEs in wireshark (version 4.4.17-160000.1.1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
16
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0033
26th percentile

Priority of the 16 CVEs

Patch now 0 Urgent 0 High 6 Routine 10

Fixed package versions

ProductReleaseFixed in
wiresharksles 16.04.4.17-160000.1.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-15163 wireshark: Denial of Service via multiple protocol dissector infinite loops (bsc#1271133).7.5 0.0033 None reported
High CVE-2026-15169 wireshark: Denial of Service via UMTS FP protocol dissector crash (bsc#1271139).7.5 0.0027 None reported
High CVE-2026-7375 wireshark: UDS protocol dissector infinite loop (bsc#1263761).7.5 0.0019 None reported
High CVE-2026-7376 wireshark: Sharkd utility crash (bsc#1263760).7.5 0.0019 None reported
High CVE-2026-7378 wireshark: Sharkd utility crash (bsc#1263759).7.5 0.0019 None reported
High CVE-2026-7379 wireshark: Sharkd utility memory leak (bsc#1263758).7.5 0.0019 None reported
Routine CVE-2026-15167 wireshark: Denial of Service via DBS Etherwatch file parser crash (bsc#1271137).5.5 0.0027 None reported
Routine CVE-2026-15164 wireshark: Denial of Service vulnerability in ciscodump (bsc#1271134).5.5 0.0014 None reported
Routine CVE-2026-15166 wireshark: Denial of Service via IEEE 802.11 protocol dissector crash (bsc#1271136).5.5 0.0014 None reported
Routine CVE-2026-15170 wireshark: Denial of service via Z39.50 protocol dissector crash (bsc#1271140).5.5 0.0014 None reported
Routine CVE-2026-15171 wireshark: Denial of service via SSH protocol dissector crash (bsc#1271141).5.5 0.0014 None reported
Routine CVE-2026-15172 wireshark: Denial of service via FMP/NOTIFY protocol dissector crash (bsc#1271142).5.5 0.0014 None reported
Routine CVE-2026-15168 wireshark: BLF file parser allows possible information disclosure (bsc#1271138).3.3 0.0014 None reported
Routine CVE-2026-15174 wireshark: Denial of Service via Catapult DCT2000 protocol dissector crash (bsc#1271144).5.5 0.0013 None reported
Routine CVE-2026-6867 wireshark: SMB2 protocol dissector crash (bsc#1263727).5.5 0.0012 None reported
Routine CVE-2026-9759 wireshark: ROHC protocol dissector crash (bsc#1266670).5.5 0.0009 None reported
Showing 1 to 16 of 16 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.