<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for wireshark</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2024:3165-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2024-09-09T07:25:24Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2024-09-09T07:25:24Z</InitialReleaseDate>
    <CurrentReleaseDate>2024-09-09T07:25:24Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for wireshark</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for wireshark fixes the following issues:

wireshark was updated from version 3.6.23 to version 4.2.6 (jsc#PED-8517):

- Security issues fixed with this update:

  * CVE-2024-0207: HTTP3 dissector crash (bsc#1218503)
  * CVE-2024-0210: Zigbee TLV dissector crash (bsc#1218506)
  * CVE-2024-0211: DOCSIS dissector crash (bsc#1218507)
  * CVE-2023-6174: Fixed SSH dissector crash (bsc#1217247)
  * CVE-2023-6175: NetScreen file parser crash (bsc#1217272)
  * CVE-2023-5371: RTPS dissector memory leak (bsc#1215959)
  * CVE-2023-3649: iSCSI dissector crash (bsc#1213318)
  * CVE-2023-2854: BLF file parser crash (bsc#1211708)
  * CVE-2023-0666: RTPS dissector crash (bsc#1211709)
  * CVE-2023-0414: EAP dissector crash (bsc#1207666)

- Major changes introduced with versions 4.2.0 and 4.0.0:

  * Version 4.2.0 https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
  * Version 4.0.0 https://www.wireshark.org/docs/relnotes/wireshark-4.0.0.html

- Added an aditional desktopfile to start wireshark which asks for
  the super user password.
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">Image SLES15-SP6-SAP-Azure-LI-BYOS-2024-3165,Image SLES15-SP6-SAP-Azure-LI-BYOS-Production-2024-3165,Image SLES15-SP6-SAP-Azure-VLI-BYOS-2024-3165,Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production-2024-3165,SUSE-2024-3165,SUSE-SLE-Module-Basesystem-15-SP6-2024-3165,SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-3165,openSUSE-SLE-15.6-2024-3165</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/</URL>
      <Description>Link for SUSE-SU-2024:3165-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-updates/2024-September/036824.html</URL>
      <Description>E-Mail link for SUSE-SU-2024:3165-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1207666</URL>
      <Description>SUSE Bug 1207666</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1211708</URL>
      <Description>SUSE Bug 1211708</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1211709</URL>
      <Description>SUSE Bug 1211709</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1213318</URL>
      <Description>SUSE Bug 1213318</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1215959</URL>
      <Description>SUSE Bug 1215959</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1217247</URL>
      <Description>SUSE Bug 1217247</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1217272</URL>
      <Description>SUSE Bug 1217272</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1218503</URL>
      <Description>SUSE Bug 1218503</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1218506</URL>
      <Description>SUSE Bug 1218506</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1218507</URL>
      <Description>SUSE Bug 1218507</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1222030</URL>
      <Description>SUSE Bug 1222030</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-0414/</URL>
      <Description>SUSE CVE CVE-2023-0414 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-0666/</URL>
      <Description>SUSE CVE CVE-2023-0666 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-2854/</URL>
      <Description>SUSE CVE CVE-2023-2854 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-3649/</URL>
      <Description>SUSE CVE CVE-2023-3649 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-5371/</URL>
      <Description>SUSE CVE CVE-2023-5371 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-6174/</URL>
      <Description>SUSE CVE CVE-2023-6174 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-6175/</URL>
      <Description>SUSE CVE CVE-2023-6175 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2024-0207/</URL>
      <Description>SUSE CVE CVE-2024-0207 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2024-0210/</URL>
      <Description>SUSE CVE CVE-2024-0210 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2024-0211/</URL>
      <Description>SUSE CVE CVE-2024-0211 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2024-2955/</URL>
      <Description>SUSE CVE CVE-2024-2955 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="Image SLES15-SP6-SAP-Azure-LI-BYOS">
      <Branch Type="Product Name" Name="Image SLES15-SP6-SAP-Azure-LI-BYOS">
        <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-LI-BYOS">Image SLES15-SP6-SAP-Azure-LI-BYOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP6-SAP-Azure-LI-BYOS-Production">
      <Branch Type="Product Name" Name="Image SLES15-SP6-SAP-Azure-LI-BYOS-Production">
        <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-LI-BYOS-Production">Image SLES15-SP6-SAP-Azure-LI-BYOS-Production</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP6-SAP-Azure-VLI-BYOS">
      <Branch Type="Product Name" Name="Image SLES15-SP6-SAP-Azure-VLI-BYOS">
        <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-VLI-BYOS">Image SLES15-SP6-SAP-Azure-VLI-BYOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production">
      <Branch Type="Product Name" Name="Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production">
        <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production">Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Basesystem 15 SP6">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Basesystem 15 SP6">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP6" CPE="cpe:/o:suse:sle-module-basesystem:15:sp6">SUSE Linux Enterprise Module for Basesystem 15 SP6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Desktop Applications 15 SP6">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Desktop Applications 15 SP6">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP6" CPE="cpe:/o:suse:sle-module-desktop-applications:15:sp6">SUSE Linux Enterprise Module for Desktop Applications 15 SP6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 15.6">
      <Branch Type="Product Name" Name="openSUSE Leap 15.6">
        <FullProductName ProductID="openSUSE Leap 15.6" CPE="cpe:/o:opensuse:leap:15.6">openSUSE Leap 15.6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="libwireshark17-4.2.6-150600.18.6.1">
      <FullProductName ProductID="libwireshark17-4.2.6-150600.18.6.1">libwireshark17-4.2.6-150600.18.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwiretap14-4.2.6-150600.18.6.1">
      <FullProductName ProductID="libwiretap14-4.2.6-150600.18.6.1">libwiretap14-4.2.6-150600.18.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwsutil15-4.2.6-150600.18.6.1">
      <FullProductName ProductID="libwsutil15-4.2.6-150600.18.6.1">libwsutil15-4.2.6-150600.18.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="wireshark-4.2.6-150600.18.6.1">
      <FullProductName ProductID="wireshark-4.2.6-150600.18.6.1">wireshark-4.2.6-150600.18.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="wireshark-devel-4.2.6-150600.18.6.1">
      <FullProductName ProductID="wireshark-devel-4.2.6-150600.18.6.1">wireshark-devel-4.2.6-150600.18.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="wireshark-ui-qt-4.2.6-150600.18.6.1">
      <FullProductName ProductID="wireshark-ui-qt-4.2.6-150600.18.6.1">wireshark-ui-qt-4.2.6-150600.18.6.1</FullProductName>
    </Branch>
    <Relationship ProductReference="libwireshark17-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-LI-BYOS">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-LI-BYOS:libwireshark17-4.2.6-150600.18.6.1">libwireshark17-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-LI-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwiretap14-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-LI-BYOS">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-LI-BYOS:libwiretap14-4.2.6-150600.18.6.1">libwiretap14-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-LI-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwsutil15-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-LI-BYOS">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-LI-BYOS:libwsutil15-4.2.6-150600.18.6.1">libwsutil15-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-LI-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="wireshark-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-LI-BYOS">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-LI-BYOS:wireshark-4.2.6-150600.18.6.1">wireshark-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-LI-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwireshark17-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-LI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1">libwireshark17-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-LI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwiretap14-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-LI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1">libwiretap14-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-LI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwsutil15-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-LI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1">libwsutil15-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-LI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="wireshark-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-LI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wireshark-4.2.6-150600.18.6.1">wireshark-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-LI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwireshark17-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-VLI-BYOS">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwireshark17-4.2.6-150600.18.6.1">libwireshark17-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-VLI-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwiretap14-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-VLI-BYOS">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwiretap14-4.2.6-150600.18.6.1">libwiretap14-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-VLI-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwsutil15-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-VLI-BYOS">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwsutil15-4.2.6-150600.18.6.1">libwsutil15-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-VLI-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="wireshark-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-VLI-BYOS">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-VLI-BYOS:wireshark-4.2.6-150600.18.6.1">wireshark-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-VLI-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwireshark17-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1">libwireshark17-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwiretap14-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1">libwiretap14-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwsutil15-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1">libwsutil15-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="wireshark-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production">
      <FullProductName ProductID="Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wireshark-4.2.6-150600.18.6.1">wireshark-4.2.6-150600.18.6.1 as a component of Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwireshark17-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1">libwireshark17-4.2.6-150600.18.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwiretap14-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1">libwiretap14-4.2.6-150600.18.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwsutil15-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1">libwsutil15-4.2.6-150600.18.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="wireshark-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1">wireshark-4.2.6-150600.18.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="wireshark-devel-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1">wireshark-devel-4.2.6-150600.18.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="wireshark-ui-qt-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Desktop Applications 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1">wireshark-ui-qt-4.2.6-150600.18.6.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwireshark17-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1">libwireshark17-4.2.6-150600.18.6.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwiretap14-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1">libwiretap14-4.2.6-150600.18.6.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwsutil15-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1">libwsutil15-4.2.6-150600.18.6.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="wireshark-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1">wireshark-4.2.6-150600.18.6.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="wireshark-devel-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1">wireshark-devel-4.2.6-150600.18.6.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="wireshark-ui-qt-4.2.6-150600.18.6.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1">wireshark-ui-qt-4.2.6-150600.18.6.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file</Note>
    </Notes>
    <CVE>CVE-2023-0414</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-0414.html</URL>
        <Description>CVE-2023-0414</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1207666</URL>
        <Description>SUSE Bug 1207666</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.</Note>
    </Notes>
    <CVE>CVE-2023-0666</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-0666.html</URL>
        <Description>CVE-2023-0666</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211709</URL>
        <Description>SUSE Bug 1211709</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file</Note>
    </Notes>
    <CVE>CVE-2023-2854</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-2854.html</URL>
        <Description>CVE-2023-2854</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211708</URL>
        <Description>SUSE Bug 1211708</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file</Note>
    </Notes>
    <CVE>CVE-2023-3649</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-3649.html</URL>
        <Description>CVE-2023-3649</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1213318</URL>
        <Description>SUSE Bug 1213318</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture file</Note>
    </Notes>
    <CVE>CVE-2023-5371</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-5371.html</URL>
        <Description>CVE-2023-5371</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1215959</URL>
        <Description>SUSE Bug 1215959</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">SSH dissector crash in Wireshark 4.0.0 to 4.0.10 allows denial of service via packet injection or crafted capture file</Note>
    </Notes>
    <CVE>CVE-2023-6174</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-6174.html</URL>
        <Description>CVE-2023-6174</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1217247</URL>
        <Description>SUSE Bug 1217247</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">NetScreen file parser crash in Wireshark 4.0.0 to 4.0.10 and 3.6.0 to 3.6.18 allows denial of service via crafted capture file</Note>
    </Notes>
    <CVE>CVE-2023-6175</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-6175.html</URL>
        <Description>CVE-2023-6175</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1217272</URL>
        <Description>SUSE Bug 1217272</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file</Note>
    </Notes>
    <CVE>CVE-2024-0207</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2024-0207.html</URL>
        <Description>CVE-2024-0207</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1218503</URL>
        <Description>SUSE Bug 1218503</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file</Note>
    </Notes>
    <CVE>CVE-2024-0210</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2024-0210.html</URL>
        <Description>CVE-2024-0210</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1218506</URL>
        <Description>SUSE Bug 1218506</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file</Note>
    </Notes>
    <CVE>CVE-2024-0211</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2024-0211.html</URL>
        <Description>CVE-2024-0211</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1218507</URL>
        <Description>SUSE Bug 1218507</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or crafted capture file</Note>
    </Notes>
    <CVE>CVE-2024-2955</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-LI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>Image SLES15-SP6-SAP-Azure-VLI-BYOS:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Desktop Applications 15 SP6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwireshark17-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwiretap14-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:libwsutil15-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-devel-4.2.6-150600.18.6.1</ProductID>
        <ProductID>openSUSE Leap 15.6:wireshark-ui-qt-4.2.6-150600.18.6.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20243165-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2024-2955.html</URL>
        <Description>CVE-2024-2955</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1222030</URL>
        <Description>SUSE Bug 1222030</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
