Medium ELSA-2026-83657 4 CVEs

Moderate: wireshark security update (Oracle Linux 8)

Published Oct 15, 2026 · Updated Oct 15, 2026

Ecosystem: Oracle Linux

Summary

[1:2.6.2-21]
- Fix DoS vulnerability in H.245 protocol dissector (CVE-2026-76927)
- Resolves: RHEL-257649

[1:2.6.2-20]
- Fix DoS vulnerability in ESS protocol dissector (CVE-2026-76919)
- Resolves: RHEL-257614

[1:2.6.2-19]
- Fix DoS via C12.22 protocol dissector crash (CVE-2026-76886)
- Resolves: RHEL-247378

[1:2.6.2-18]
- Fix DoS via RRC protocol dissector out-of-bounds write (CVE-2026-76880)
- Resolves: RHEL-245613

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	wireshark	1:2.6.2-21.el8_10
Oracle Linux · 8	wireshark-cli	1:2.6.2-21.el8_10
Oracle Linux · 8	wireshark-devel	1:2.6.2-21.el8_10

Vulnerabilities 4

High 8.1

CVE-2026-76886

Heap-based Buffer Overflow in Wireshark

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Aug 19, 2026
High 7.5

CVE-2026-76880

Out-of-bounds Write in Wireshark

RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Aug 19, 2026
Medium 5.3

CVE-2026-76919

Use of Uninitialized Variable in Wireshark

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Aug 19, 2026
Medium 4.7

CVE-2026-76927

NULL Pointer Dereference in Wireshark

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Aug 19, 2026