The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.9 advisory.

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

  - MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service     (CVE-2025-13946)

  - IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of     service (CVE-2026-0959)

  - HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service     (CVE-2026-0960)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Plugins Search

critical