Summary
The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.
Security Fix(es):
* wireshark: Buffer Over-read in Wireshark (CVE-2026-3203)
* wireshark: Improperly Controlled Sequential Memory Allocation in Wireshark (CVE-2026-3201)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 10 | wireshark | 1:4.4.2-4.el10_1.4 |
| AlmaLinux · 10 | wireshark-cli | 1:4.4.2-4.el10_1.4 |
| AlmaLinux · 10 | wireshark-devel | 1:4.4.2-4.el10_1.4 |
Vulnerabilities 2
-
Medium 5.5
Buffer Over-read in Wireshark
RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service
-
Medium 4.7
Improperly Controlled Sequential Memory Allocation in Wireshark
USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service