Most recent entries from all

ALSA-2026:9666 — Moderate: wireshark security update

Affected: AlmaLinux:10: wireshark, AlmaLinux:10: wireshark-cli, AlmaLinux:10: wireshark-devel

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: Buffer Over-read in Wireshark (CVE-2026-3203) * wireshark: Improperly Controlled Sequential Memory Allocation in Wireshark (CVE-2026-3201)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-09328

certfr-2026-avi-0211 — De multiples vulnérabilités ont été découvertes dans Wireshark. Elles permettent à un attaquant de provoquer un déni de…

certfr-2026-avi-0211

EUVD-2026-371373

fkie_cve-2026-3203

RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

GHSA-qrr9-2772-633f

RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

OESA-2026-1545 — wireshark security update

Affected: openEuler:24.03-LTS-SP3: wireshark

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. Security Fix(es):

Wireshark is a widely used network protocol analyzer. In Wireshark versions 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12, there is an out-of-bounds write vulnerability in its IEEE 802.11 protocol dissector. An attacker can exploit this vulnerability by crafting a malicious network packet. During the parsing process, this triggers the vulnerability, causing the Wireshark process to crash, thereby achieving a denial of service attack.(CVE-2026-0959)

Wireshark is a widely used network protocol analyzer. In versions 4.6.0 to 4.6.2, a flaw exists in its HTTP3 protocol dissector. When processing network packets of a specific format, it enters an unreachable exit condition (infinite loop), causing the Wireshark process to hang or crash, resulting in a denial of service.(CVE-2026-0960)

Wireshark is a widely used network protocol analyzer. A vulnerability exists in the BLF file parser of Wireshark versions 4.6.0 to 4.6.2 and versions 4.4.0 to 4.4.12. An attacker can craft a malicious BLF file to trigger an out-of-bounds write in the parser, leading to a crash and resulting in a denial of service.(CVE-2026-0961)

SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows…

openSUSE-SU-2026:10274-1 — libwireshark19-4.6.4-1.1 on GA media

libwireshark19-4.6.4-1.1 on GA media

RHSA-2026:26182 — Red Hat Security Advisory: wireshark security update

wireshark: Improperly Controlled Sequential Memory Allocation in Wireshark wireshark: Buffer Over-read in Wireshark wireshark: Heap-based Buffer Overflow in Wireshark wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

SUSE-SU-2026:21559-1 — Security update for wireshark

Security update for wireshark

UBUNTU-CVE-2026-3203

Affected: Ubuntu:Pro:14.04:LTS: wireshark, Ubuntu:Pro:16.04:LTS: wireshark, Ubuntu:Pro:18.04:LTS: wireshark, Ubuntu:Pro:20.04:LTS: wireshark, Ubuntu:Pro:22.04:LTS: wireshark, Ubuntu:24.04:LTS: wireshark, Ubuntu:25.10: wireshark, Ubuntu:26.04:LTS: wireshark

RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

WID-SEC-W-2026-0536 — Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service

Ein lokaler Angreifer kann mehrere Schwachstellen in Wireshark ausnutzen, um einen Denial of Service Angriff durchzuführen.