Red Hat Security Advisory: wireshark security update

Fixed packages 6

Vulnerabilities 4

• High 7.8
  CVE-2026-5405

  Heap-based Buffer Overflow in Wireshark

  RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Apr 30, 2026
• High 7.0
  CVE-2026-5656

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

  Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Apr 30, 2026
• Medium 5.5
  CVE-2026-3203

  Buffer Over-read in Wireshark

  RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux Alpine
  Feb 25, 2026
• Medium 4.7
  CVE-2026-3201

  Improperly Controlled Sequential Memory Allocation in Wireshark

  USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux Alpine
  Feb 25, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2442639
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2442641
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2464273
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2464276
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26182.json
• report
  https://access.redhat.com/security/cve/CVE-2026-3201
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-3201
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-3201
• article
  https://gitlab.com/wireshark/wireshark/-/issues/20972
• article
  https://www.wireshark.org/security/wnpa-sec-2026-05.html
• report
  https://access.redhat.com/security/cve/CVE-2026-3203
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-3203
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-3203
• article
  https://gitlab.com/wireshark/wireshark/-/issues/21009
• article
  https://www.wireshark.org/security/wnpa-sec-2026-07.html
• report
  https://access.redhat.com/security/cve/CVE-2026-5405
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-5405
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-5405
• article
  https://gitlab.com/wireshark/wireshark/-/issues/21105
• article
  https://www.wireshark.org/security/wnpa-sec-2026-17.html
• report
  https://access.redhat.com/security/cve/CVE-2026-5656
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-5656
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-5656
• article
  https://gitlab.com/wireshark/wireshark/-/issues/21115
• article
  https://www.wireshark.org/security/wnpa-sec-2026-21.html