Summary
The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.
Security Fix(es):
* wireshark: Heap-based Buffer Overflow in Wireshark (CVE-2026-5405)
* wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark (CVE-2026-5656)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | wireshark | 1:4.4.2-10.el10_2 |
| AlmaLinux · 10 | wireshark-cli | 1:4.4.2-10.el10_2 |
| AlmaLinux · 10 | wireshark-devel | 1:4.4.2-10.el10_2 |
Vulnerabilities 2
-
High 7.8
Heap-based Buffer Overflow in Wireshark
RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution
-
High 7.0
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark
Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution