Medium ELSA-2026-9666 2 CVEs

Moderate: wireshark security update (Oracle Linux 10)

Published Apr 22, 2026 · Updated Apr 22, 2026

Ecosystem: Oracle Linux

Summary

[4.4.2-4.0.1.el10_1.4]
- Fix post script to not fail during initial installation [Orabug: 37565359]

[1:4.4.2-4.4]
- Resolves: RHEL-152921 - CVE-2026-3203 Buffer Over-read

[1:4.4.2-4.3]
- Resolves: RHEL-152912 - CVE-2026-3201 Improperly Controlled Sequential Memory Allocation

[1:4.4.2-4.2]
- Resolves: RHEL-136916 - NULL Pointer Dereference in Wireshark (CVE-2025-9817)

[1:4.4.2-4.1]
- Resolves: RHEL-130425 - Access of Uninitialized Pointer in Wireshark

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 10	wireshark	1:4.4.2-4.0.1.el10_1.4
Oracle Linux · 10	wireshark-cli	1:4.4.2-4.0.1.el10_1.4
Oracle Linux · 10	wireshark-devel	1:4.4.2-4.0.1.el10_1.4

Vulnerabilities 2

Medium 5.5

CVE-2026-3203

Buffer Over-read in Wireshark

RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux Alpine

Feb 25, 2026
Medium 4.7

CVE-2026-3201

Improperly Controlled Sequential Memory Allocation in Wireshark

USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux Alpine

Feb 25, 2026