# SUSE-SU-2026:3501-1: wireshark security update

SUSE-SU-2026:3501-1, released August 5, 2026, fixes 56 CVEs in wireshark (version 4.6.7-150700.21.11.1). None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-3501-1
- Platform: Linux
- Released: Aug 5, 2026
- Priority: High (Closes CVE-2026-5402, high severity)
- CVEs: 56, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:3501-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [wireshark](https://patchblox.com/security/data/product/linux/wireshark.md) | sles 15.7 | 4.6.7-150700.21.11.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-5402](https://patchblox.com/security/data/cve/CVE-2026-5402.md) | High | wireshark: TLS dissector crash and possible code execution (bsc#1263755). | 8.8 | 0.0039 |  |
| [CVE-2026-15163](https://patchblox.com/security/data/cve/CVE-2026-15163.md) | High | wireshark: Denial of Service via multiple protocol dissector infinite loops (bsc#1271133). | 7.5 | 0.0033 |  |
| [CVE-2026-15169](https://patchblox.com/security/data/cve/CVE-2026-15169.md) | High | wireshark: Denial of Service via UMTS FP protocol dissector crash (bsc#1271139). | 7.5 | 0.0027 |  |
| [CVE-2026-5653](https://patchblox.com/security/data/cve/CVE-2026-5653.md) | High | wireshark: DCP-ETSI dissector crash (bsc#1263750). | 7.5 | 0.0021 |  |
| [CVE-2026-5654](https://patchblox.com/security/data/cve/CVE-2026-5654.md) | High | wireshark: AMR-NB audio codec crash (bsc#1263749). | 7.5 | 0.0021 |  |
| [CVE-2026-5655](https://patchblox.com/security/data/cve/CVE-2026-5655.md) | High | wireshark: SDP dissector crash (bsc#1263748). | 7.5 | 0.0021 |  |
| [CVE-2026-5657](https://patchblox.com/security/data/cve/CVE-2026-5657.md) | High | wireshark: iLBC audio codec crash (bsc#1263747). | 7.5 | 0.0021 |  |
| [CVE-2026-6868](https://patchblox.com/security/data/cve/CVE-2026-6868.md) | High | wireshark: HTTP protocol dissector crash (bsc#1263762). | 7.5 | 0.0019 |  |
| [CVE-2026-7375](https://patchblox.com/security/data/cve/CVE-2026-7375.md) | High | wireshark: UDS protocol dissector infinite loop (bsc#1263761). | 7.5 | 0.0019 |  |
| [CVE-2026-7376](https://patchblox.com/security/data/cve/CVE-2026-7376.md) | High | wireshark: Sharkd utility crash (bsc#1263760). | 7.5 | 0.0019 |  |
| [CVE-2026-7378](https://patchblox.com/security/data/cve/CVE-2026-7378.md) | High | wireshark: Sharkd utility crash (bsc#1263759). | 7.5 | 0.0019 |  |
| [CVE-2026-7379](https://patchblox.com/security/data/cve/CVE-2026-7379.md) | High | wireshark: Sharkd utility memory leak (bsc#1263758). | 7.5 | 0.0019 |  |
| [CVE-2026-5656](https://patchblox.com/security/data/cve/CVE-2026-5656.md) | High | wireshark: Profile import crash and possible code execution (bsc#1263809). | 7.8 | 0.0018 |  |
| [CVE-2026-6519](https://patchblox.com/security/data/cve/CVE-2026-6519.md) | High | wireshark: MBIM protocol dissector infinite loop (bsc#1263746). | 7.5 | 0.0017 |  |
| [CVE-2026-6520](https://patchblox.com/security/data/cve/CVE-2026-6520.md) | High | wireshark: OpenFlow v6 protocol dissector infinite loop (bsc#1263745). | 7.5 | 0.0017 |  |
| [CVE-2026-5403](https://patchblox.com/security/data/cve/CVE-2026-5403.md) | High | wireshark: SBC audio codec crash (bsc#1263765). | 7.8 | 0.0016 |  |
| [CVE-2026-5405](https://patchblox.com/security/data/cve/CVE-2026-5405.md) | High | wireshark: RDP dissector crash (bsc#1263767). | 7.8 | 0.0016 |  |
| [CVE-2026-15167](https://patchblox.com/security/data/cve/CVE-2026-15167.md) | Routine | wireshark: Denial of Service via DBS Etherwatch file parser crash (bsc#1271137). | 5.5 | 0.0027 |  |
| [CVE-2026-6532](https://patchblox.com/security/data/cve/CVE-2026-6532.md) | Routine | wireshark: Kismet protocol dissector crash (bsc#1263734). | 5.5 | 0.0020 |  |
| [CVE-2026-6531](https://patchblox.com/security/data/cve/CVE-2026-6531.md) | Routine | wireshark: SANE protocol dissector infinite loop (bsc#1263735). | 5.5 | 0.0019 |  |
| [CVE-2026-6525](https://patchblox.com/security/data/cve/CVE-2026-6525.md) | Routine | wireshark: IEEE 802.11 protocol dissector crash (bsc#1263810). | 5.5 | 0.0019 |  |
| [CVE-2026-6534](https://patchblox.com/security/data/cve/CVE-2026-6534.md) | Routine | wireshark: USB HID dissector infinite loop (bsc#1263732). | 5.5 | 0.0018 |  |
| [CVE-2026-6536](https://patchblox.com/security/data/cve/CVE-2026-6536.md) | Routine | wireshark: DLMS/COSEM dissector infinite loop (bsc#1263730). | 5.5 | 0.0018 |  |
| [CVE-2026-6537](https://patchblox.com/security/data/cve/CVE-2026-6537.md) | Routine | wireshark: ZigBee dissector crash (bsc#1263729). | 5.5 | 0.0018 |  |
| [CVE-2026-6538](https://patchblox.com/security/data/cve/CVE-2026-6538.md) | Routine | wireshark: BEEP dissector crash (bsc#1263728). | 5.5 | 0.0018 |  |
| [CVE-2026-5406](https://patchblox.com/security/data/cve/CVE-2026-5406.md) | Routine | wireshark: FC-SWILS dissector crash (bsc#1263754). | 5.5 | 0.0018 |  |
| [CVE-2026-6530](https://patchblox.com/security/data/cve/CVE-2026-6530.md) | Routine | wireshark: DCP-ETSI protocol dissector crash (bsc#1263736). | 5.5 | 0.0016 |  |
| [CVE-2026-6870](https://patchblox.com/security/data/cve/CVE-2026-6870.md) | Routine | wireshark: GSM RP protocol dissector crash (bsc#1263725). | 5.5 | 0.0016 |  |
| [CVE-2026-6533](https://patchblox.com/security/data/cve/CVE-2026-6533.md) | Routine | wireshark: Dissection engine LZ77 decompression crash (bsc#1263733). | 5.5 | 0.0015 |  |
| [CVE-2026-5408](https://patchblox.com/security/data/cve/CVE-2026-5408.md) | Routine | wireshark: BT-DHT dissector crash (bsc#1263752). | 5.5 | 0.0014 |  |
| [CVE-2026-5409](https://patchblox.com/security/data/cve/CVE-2026-5409.md) | Routine | wireshark: Monero dissector crash (bsc#1263751). | 5.5 | 0.0014 |  |
| [CVE-2026-6521](https://patchblox.com/security/data/cve/CVE-2026-6521.md) | Routine | wireshark: OpenFlow v5 protocol dissector infinite loops (bsc#1263744). | 5.5 | 0.0014 |  |
| [CVE-2026-15164](https://patchblox.com/security/data/cve/CVE-2026-15164.md) | Routine | wireshark: Denial of Service vulnerability in ciscodump (bsc#1271134). | 5.5 | 0.0014 |  |
| [CVE-2026-15165](https://patchblox.com/security/data/cve/CVE-2026-15165.md) | Routine | wireshark: Denial of Service via TLS ECH decryptor crash (bsc#1271135). | 5.5 | 0.0014 |  |
| [CVE-2026-15166](https://patchblox.com/security/data/cve/CVE-2026-15166.md) | Routine | wireshark: Denial of Service via IEEE 802.11 protocol dissector crash (bsc#1271136). | 5.5 | 0.0014 |  |
| [CVE-2026-15170](https://patchblox.com/security/data/cve/CVE-2026-15170.md) | Routine | wireshark: Denial of service via Z39.50 protocol dissector crash (bsc#1271140). | 5.5 | 0.0014 |  |
| [CVE-2026-15171](https://patchblox.com/security/data/cve/CVE-2026-15171.md) | Routine | wireshark: Denial of service via SSH protocol dissector crash (bsc#1271141). | 5.5 | 0.0014 |  |
| [CVE-2026-15172](https://patchblox.com/security/data/cve/CVE-2026-15172.md) | Routine | wireshark: Denial of service via FMP/NOTIFY protocol dissector crash (bsc#1271142). | 5.5 | 0.0014 |  |
| [CVE-2026-6528](https://patchblox.com/security/data/cve/CVE-2026-6528.md) | Routine | wireshark: TLS protocol dissector infinite loop (bsc#1263738). | 5.5 | 0.0014 |  |
| [CVE-2026-6535](https://patchblox.com/security/data/cve/CVE-2026-6535.md) | Routine | wireshark: Dissection engine zlib decompression crash (bsc#1263731). | 5.5 | 0.0014 |  |
| [CVE-2026-5407](https://patchblox.com/security/data/cve/CVE-2026-5407.md) | Routine | wireshark: SMB2 dissector infinite loop (bsc#1263753). | 5.5 | 0.0014 |  |
| [CVE-2026-15168](https://patchblox.com/security/data/cve/CVE-2026-15168.md) | Routine | wireshark: BLF file parser allows possible information disclosure (bsc#1271138). | 3.3 | 0.0014 |  |
| [CVE-2026-15174](https://patchblox.com/security/data/cve/CVE-2026-15174.md) | Routine | wireshark: Denial of Service via Catapult DCT2000 protocol dissector crash (bsc#1271144). | 5.5 | 0.0013 |  |
| [CVE-2026-15173](https://patchblox.com/security/data/cve/CVE-2026-15173.md) | Routine | wireshark: Denial of Service via pcapng file parser crash (bsc#1271143). | 5.5 | 0.0013 |  |
| [CVE-2026-6527](https://patchblox.com/security/data/cve/CVE-2026-6527.md) | Routine | wireshark: ASN.1 PER dissector crash (bsc#1263739). | 5.5 | 0.0013 |  |
| [CVE-2026-6529](https://patchblox.com/security/data/cve/CVE-2026-6529.md) | Routine | wireshark: iLBC audio codec crash (bsc#1263737). | 5.5 | 0.0013 |  |
| [CVE-2026-6869](https://patchblox.com/security/data/cve/CVE-2026-6869.md) | Routine | wireshark: WebSocket protocol dissector crash (bsc#1263726). | 5.5 | 0.0013 |  |
| [CVE-2026-6523](https://patchblox.com/security/data/cve/CVE-2026-6523.md) | Routine | wireshark: GNW protocol dissector infinite loop (bsc#1263742). | 5.5 | 0.0012 |  |
| [CVE-2026-6524](https://patchblox.com/security/data/cve/CVE-2026-6524.md) | Routine | wireshark: MySQL protocol dissector crash (bsc#1263741). | 5.5 | 0.0012 |  |
| [CVE-2026-6526](https://patchblox.com/security/data/cve/CVE-2026-6526.md) | Routine | wireshark: RTSP protocol dissector crash (bsc#1263740). | 5.5 | 0.0012 |  |
| [CVE-2026-6867](https://patchblox.com/security/data/cve/CVE-2026-6867.md) | Routine | wireshark: SMB2 protocol dissector crash (bsc#1263727). | 5.5 | 0.0012 |  |
| [CVE-2026-5299](https://patchblox.com/security/data/cve/CVE-2026-5299.md) | Routine | wireshark: ICMPv6 dissector crash (bsc#1263757). | 5.5 | 0.0012 |  |
| [CVE-2026-5401](https://patchblox.com/security/data/cve/CVE-2026-5401.md) | Routine | wireshark: AFP dissector crash (bsc#1263756). | 5.5 | 0.0012 |  |
| [CVE-2026-6522](https://patchblox.com/security/data/cve/CVE-2026-6522.md) | Routine | wireshark: RPKI-Router protocol dissector infinite loop (bsc#1263743). | 5.5 | 0.0012 |  |
| [CVE-2026-5404](https://patchblox.com/security/data/cve/CVE-2026-5404.md) | Routine | wireshark: K12 RF5 file parser crash (bsc#1263766). | 5.5 | 0.0012 |  |
| [CVE-2026-9759](https://patchblox.com/security/data/cve/CVE-2026-9759.md) | Routine | wireshark: ROHC protocol dissector crash (bsc#1266670). | 5.5 | 0.0009 |  |

---

Data as of 2026-11-12T07:53:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.