Red Hat Security Advisory: wireshark security update

Fixed packages 6

Vulnerabilities 8

• High 8.1
  CVE-2026-76886

  Heap-based Buffer Overflow in Wireshark

  C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• High 8.1
  CVE-2026-95387

  Heap-based Buffer Overflow in Wireshark

  SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Sep 29, 2026
• High 8.1
  CVE-2026-95389

  Heap-based Buffer Overflow in Wireshark

  SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Sep 29, 2026
• High 7.5
  CVE-2026-76879

  Stack-based Buffer Overflow in Wireshark

  C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• High 7.5
  CVE-2026-76880

  Out-of-bounds Write in Wireshark

  RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• High 7.5
  CVE-2026-76928

  NULL Pointer Dereference in Wireshark

  X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 5.3
  CVE-2026-76919

  Use of Uninitialized Variable in Wireshark

  ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 4.7
  CVE-2026-76927

  NULL Pointer Dereference in Wireshark

  H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2520079
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2520088
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2520093
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2520098
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2520100
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2520103
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2543033
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2543037
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_98089.json
• report
  https://access.redhat.com/security/cve/CVE-2026-76879
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-76879
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-76879
• article
  https://gitlab.com/wireshark/wireshark/-/work_items/21480
• article
  https://www.wireshark.org/security/wnpa-sec-2026-89.html
• report
  https://access.redhat.com/security/cve/CVE-2026-76880
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-76880
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-76880
• article
  https://gitlab.com/wireshark/wireshark/-/work_items/21478
• article
  https://www.wireshark.org/security/wnpa-sec-2026-88.html
• report
  https://access.redhat.com/security/cve/CVE-2026-76886
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-76886
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-76886
• article
  https://gitlab.com/wireshark/wireshark/-/work_items/21439
• article
  https://www.wireshark.org/security/wnpa-sec-2026-75.html
• report
  https://access.redhat.com/security/cve/CVE-2026-76919
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-76919
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-76919
• article
  https://gitlab.com/wireshark/wireshark/-/work_items/21467
• article
  https://www.wireshark.org/security/wnpa-sec-2026-86.html
• report
  https://access.redhat.com/security/cve/CVE-2026-76927
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-76927
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-76927
• article
  https://gitlab.com/wireshark/wireshark/-/work_items/21447
• article
  https://www.wireshark.org/security/wnpa-sec-2026-77.html
• report
  https://access.redhat.com/security/cve/CVE-2026-76928
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-76928
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-76928
• article
  https://gitlab.com/wireshark/wireshark/-/work_items/21469