High WID-SEC-2026-1311 42 CVEs

Wireshark: Mehrere Schwachstellen

Published Apr 29, 2026 · Updated Aug 16, 2026 · Revision 14 · de-DE

Vendor: Debian Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: openSUSE Product: Rocky Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Wireshark ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder andere, nicht näher spezifizierte Angriffe durchzuführen.

Product

Wireshark ist eine Software zum Mitschneiden von Netzwerkverkehr und zur Analyse von Netzwerkprotokollen.

Vulnerabilities 42

High 8.8

CVE-2026-5402

Heap-based Buffer Overflow in Wireshark

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu

Apr 30, 2026
High 7.8

CVE-2026-5403

Heap-based Buffer Overflow in Wireshark

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
High 7.8

CVE-2026-5405

Heap-based Buffer Overflow in Wireshark

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
High 7.0

CVE-2026-5656

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-5299

Uncontrolled Recursion in Wireshark

ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-5401

Uncontrolled Recursion in Wireshark

AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-5406

Uncontrolled Recursion in Wireshark

FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-5407

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-5408

Uncontrolled Recursion in Wireshark

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-5409

Uncontrolled Recursion in Wireshark

Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-5653

Heap-based Buffer Overflow in Wireshark

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-5654

Stack-based Buffer Overflow in Wireshark

AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-5655

Use After Free in Wireshark

SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu

Apr 30, 2026
Medium 5.5

CVE-2026-5657

Double Free in Wireshark

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6519

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6520

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6521

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6522

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6523

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6524

Access of Uninitialized Pointer in Wireshark

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6525

NULL Pointer Dereference in Wireshark

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu

May 2, 2026
Medium 5.5

CVE-2026-6526

NULL Pointer Dereference in Wireshark

RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu

Apr 30, 2026
Medium 5.5

CVE-2026-6527

Uncontrolled Recursion in Wireshark

ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6528

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu

Apr 30, 2026
Medium 5.5

CVE-2026-6529

Heap-based Buffer Overflow in Wireshark

iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6530

Heap-based Buffer Overflow in Wireshark

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6531

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6532

Buffer Over-read in Wireshark

Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6533

Improperly Controlled Sequential Memory Allocation in Wireshark

Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6534

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6535

Improperly Controlled Sequential Memory Allocation in Wireshark

Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6536

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu

Apr 30, 2026
Medium 5.5

CVE-2026-6537

Stack-based Buffer Overflow in Wireshark

ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6538

Stack-based Buffer Overflow in Wireshark

BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6868

Stack-based Buffer Overflow in Wireshark

HTTP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6869

Improperly Controlled Sequential Memory Allocation in Wireshark

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-6870

Access of Uninitialized Pointer in Wireshark

GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-7375

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-7376

NULL Pointer Dereference in Wireshark

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-7378

Heap-based Buffer Overflow in Wireshark

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 5.5

CVE-2026-7379

Missing Release of Memory after Effective Lifetime in Wireshark

Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026
Medium 4.7

CVE-2026-5404

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux

Apr 30, 2026

Revision history

2026-08-16 #14
Neue Updates von SUSE aufgenommen
2026-08-06 #13
Neue Updates von openSUSE aufgenommen
2026-08-05 #12
Neue Updates von SUSE aufgenommen
2026-07-16 #11
Neue Updates von Oracle Linux aufgenommen
2026-07-14 #10
Neue Updates von SUSE aufgenommen
2026-06-17 #9
Neue Updates von SUSE aufgenommen
2026-06-15 #8
Neue Updates von Red Hat aufgenommen
2026-06-04 #7
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
2026-06-01 #6
Neue Updates von SUSE aufgenommen
2026-05-25 #5
Neue Updates von Red Hat aufgenommen
2026-05-10 #4
Neue Updates von openSUSE aufgenommen
2026-05-06 #3
Neue Updates von Debian aufgenommen
2026-05-03 #2
Referenz(en) aufgenommen: EUVD-2026-26459, EUVD-2026-26463, EUVD-2026-26462, EUVD-2026-26460, EUVD-2026-26785
2026-04-29 #1
Initiale Fassung

References

Wireshark 4.4.15 Release Notes vom 2026-04-29
https://www.wireshark.org/docs/relnotes/wireshark-4.4.15.html
Wireshark 4.6.5 release notes vom 2026-04-29
https://www.wireshark.org/docs/relnotes/wireshark-4.6.5.html
Wireshark Security Advisory vom 2026-04-29
https://www.wireshark.org/download.html
Debian Security Advisory DSA-6249 vom 2026-05-07
https://security-tracker.debian.org/tracker/DSA-6249-1
openSUSE Security Update OPENSUSE-SU-2026:20685-1 vom 2026-05-08
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TMO2ZT2J2UGZ4EYXVISTJKFMGLLGSTGV/
SUSE Security Update SUSE-SU-2026:21559-1 vom 2026-05-11
https://lists.suse.com/pipermail/sle-security-updates/2026-May/025962.html
Red Hat Security Advisory RHSA-2026:20600 vom 2026-05-26
https://access.redhat.com/errata/RHSA-2026:20600
SUSE Security Update SUSE-SU-2026:2203-1 vom 2026-06-01
https://lists.suse.com/pipermail/sle-security-updates/2026-June/026423.html
Rocky Linux Security Advisory RLSA-2026:20600 vom 2026-06-04
https://errata.build.resf.org/RLSA-2026:20600
Red Hat Security Advisory RHSA-2026:26182 vom 2026-06-16
https://access.redhat.com/errata/RHSA-2026:26182
SUSE Security Update SUSE-SU-2026:2437-1 vom 2026-06-17
https://lists.suse.com/pipermail/sle-security-updates/2026-June/026821.html
SUSE Security Update SUSE-SU-2026:2969-1 vom 2026-07-14
https://lists.suse.com/pipermail/sle-security-updates/2026-July/027462.html
Oracle Linux Security Advisory ELSA-2026-20600 vom 2026-07-17
https://linux.oracle.com/errata/ELSA-2026-20600.html
SUSE Security Update SUSE-SU-2026:3501-1 vom 2026-08-05
https://lists.suse.com/pipermail/sle-security-updates/2026-August/028159.html
openSUSE Security Update OPENSUSE-SU-2026:21534-1 vom 2026-08-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WDNLQKTV4NSSY346OQIZD5Y2EZFWGLSQ/
SUSE Security Update SUSE-SU-2026:23147-1 vom 2026-08-14
https://lists.suse.com/pipermail/sle-security-updates/2026-August/028302.html
SUSE Security Update SUSE-SU-2026:23124-1 vom 2026-08-14
https://lists.suse.com/pipermail/sle-security-updates/2026-August/028320.html