Summary
[1:3.4.10-10.4]
- Fix DoS via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)
- Resolves: RHEL-272330
[1:3.4.10-9.4]
- Fix DoS vulnerability in H.245 protocol dissector (CVE-2026-76927)
- Resolves: RHEL-257656
[1:3.4.10-9.3]
- Fix DoS vulnerability in ESS protocol dissector (CVE-2026-76919)
- Resolves: RHEL-257615
[1:3.4.10-9.2]
- Fix DoS via C12.22 protocol dissector crash (CVE-2026-76886)
- Resolves: RHEL-247390
[1:3.4.10-9.1]
- Fix DoS via RRC protocol dissector out-of-bounds write (CVE-2026-76880)
- Resolves: RHEL-245617
[1:3.4.10-9]
- Resolves: RHEL-130440 - Access of Uninitialized Pointer in Wireshark
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| Oracle Linux · 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| Oracle Linux · 9 | wireshark-devel | 1:3.4.10-9.el9_8.5 |
Vulnerabilities 5
-
High 8.1
Heap-based Buffer Overflow in Wireshark
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
-
High 8.1
Heap-based Buffer Overflow in Wireshark
SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
High 7.5
Out-of-bounds Write in Wireshark
RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 5.3
Use of Uninitialized Variable in Wireshark
ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 4.7
NULL Pointer Dereference in Wireshark
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service