Summary
Ein Angreifer kann mehrere Schwachstellen in Wireshark ausnutzen, um einen Denial of Service Angriff durchzuführen oder um vertrauliche Informationen offenzulegen.
Product
Wireshark ist eine Software zum Mitschneiden von Netzwerkverkehr und zur Analyse von Netzwerkprotokollen.
Vulnerabilities 12
-
High 7.5
Stack-based Buffer Overflow in Wireshark
DBS Etherwatch file parser crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
-
Medium 5.5
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow denial of service
-
Medium 5.5
Heap-based Buffer Overflow in ciscodump
Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
-
Medium 5.5
Heap-based Buffer Overflow in Wireshark
TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service
-
Medium 5.5
Stack-based Buffer Overflow in Wireshark
IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
-
Medium 5.5
Heap-based Buffer Overflow in Wireshark
UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
-
Medium 5.5
Heap-based Buffer Overflow in Wireshark
Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
-
Medium 5.5
NULL Pointer Dereference in Wireshark
SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
-
Medium 5.5
Unchecked Input for Loop Condition in Wireshark
FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
-
Medium 5.5
Heap-based Buffer Overflow in Wireshark
Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
-
Medium 4.7
Heap-based Buffer Overflow in Wireshark
pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service
-
Low 2.5
Use of Uninitialized Variable in Wireshark
BLF file parser in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows possible information disclosure
Revision history
-
#8
Neue Updates von SUSE aufgenommen
-
#7
Neue Updates von Debian aufgenommen
-
#6
Neue Updates von SUSE aufgenommen
-
#5
Neue Updates von openSUSE aufgenommen
-
#4
Neue Updates von openSUSE aufgenommen
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von Fedora aufgenommen
-
#1
Initiale Fassung
References
-
Wireshark 4.6.7 Release Notes vom 2026-07-08
https://www.wireshark.org/docs/relnotes/wireshark-4.6.7.html
-
Wireshark 4.4.17 Release Notes vom 2026-07-08
https://www.wireshark.org/docs/relnotes/wireshark-4.4.17.html
-
Wireshark Security Advisory wnpa-sec-2026-54 vom 2026-07-08
https://www.wireshark.org/security/wnpa-sec-2026-54.html
-
Wireshark Security Advisory wnpa-sec-2026-55 vom 2026-07-08
https://www.wireshark.org/security/wnpa-sec-2026-55.html
-
Wireshark Security Advisory wnpa-sec-2026-56 vom 2026-07-08
https://www.wireshark.org/security/wnpa-sec-2026-56.html
-
Wireshark Security Advisory wnpa-sec-2026-57 vom 2026-07-08
https://www.wireshark.org/security/wnpa-sec-2026-57.html
-
Wireshark Security Advisory wnpa-sec-2026-58 vom 2026-07-08
https://www.wireshark.org/security/wnpa-sec-2026-58.html
-
Wireshark Security Advisory wnpa-sec-2026-59 vom 2026-07-08
https://www.wireshark.org/security/wnpa-sec-2026-59.html
-
Wireshark Security Advisory wnpa-sec-2026-60 vom 2026-07-08
https://www.wireshark.org/security/wnpa-sec-2026-60.html
-
Wireshark Security Advisory wnpa-sec-2026-61 vom 2026-07-08
https://www.wireshark.org/security/wnpa-sec-2026-61.html
-
Wireshark Security Advisory wnpa-sec-2026-62 vom 2026-07-08
https://www.wireshark.org/security/wnpa-sec-2026-62.html
-
Wireshark Security Advisory wnpa-sec-2026-63 vom 2026-07-08
https://www.wireshark.org/security/wnpa-sec-2026-63.html
-
Fedora Security Advisory FEDORA-2026-BC152C9FF6 vom 2026-07-15
https://bodhi.fedoraproject.org/updates/FEDORA-2026-bc152c9ff6
-
SUSE Security Update SUSE-SU-2026:3501-1 vom 2026-08-05
https://lists.suse.com/pipermail/sle-security-updates/2026-August/028159.html
-
openSUSE Security Update OPENSUSE-SU-2026:21534-1 vom 2026-08-06
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WDNLQKTV4NSSY346OQIZD5Y2EZFWGLSQ/
-
openSUSE Security Update OPENSUSE-SU-2026:11460-1 vom 2026-08-07
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OUNLKEGMF6HPV3WJRY6PZJF4BTUIQWBO/
-
SUSE Security Update SUSE-SU-2026:23147-1 vom 2026-08-14
https://lists.suse.com/pipermail/sle-security-updates/2026-August/028302.html
-
SUSE Security Update SUSE-SU-2026:23124-1 vom 2026-08-14
https://lists.suse.com/pipermail/sle-security-updates/2026-August/028320.html
-
Debian Security Advisory DSA-6471 vom 2026-08-27
https://security-tracker.debian.org/tracker/DSA-6471-1
-
SUSE Security Update SUSE-SU-2026:3994-1 vom 2026-09-12
https://lists.suse.com/pipermail/sle-security-updates/2026-September/028896.html
-
SUSE Security Update SUSE-SU-2026:3995-1 vom 2026-09-12
https://lists.suse.com/pipermail/sle-security-updates/2026-September/028895.html
-
SUSE Security Update SUSE-SU-2026:4077-1 vom 2026-09-12
https://lists.suse.com/pipermail/sle-security-updates/2026-September/028925.html