Skip to content
OpenAdvisories
High ALAS2023-2026-2117 27 CVEs

Important: wireshark security update (Amazon Linux 2023)

Published Aug 31, 2026 · Updated Aug 31, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-76929: Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76928: X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76927: H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76926: BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76924: Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76921: CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76920: 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76919: ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76918: SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76917: Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76891: Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76890: Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76889: UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76888: RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76887: Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76886: C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76885: Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76884: ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76883: Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76882: Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76881: CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76880: RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76879: C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-19695: Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service CVE-2026-19694: TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2023 wireshark-cli 1:4.6.8-1.amzn2023.0.1
Amazon Linux · 2023 wireshark-cli-debuginfo 1:4.6.8-1.amzn2023.0.1
Amazon Linux · 2023 wireshark-debugsource 1:4.6.8-1.amzn2023.0.1
Amazon Linux · 2023 wireshark-devel 1:4.6.8-1.amzn2023.0.1

Vulnerabilities 27

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-19694.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-19695.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76879.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76880.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76881.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76882.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76883.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76884.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76885.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76886.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76887.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76888.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76889.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76890.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76891.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76917.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76918.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76919.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76920.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76921.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76922.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76923.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76924.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76926.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76927.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76928.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-76929.html