Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 28

• High 8.1
  CVE-2026-76886

  Heap-based Buffer Overflow in Wireshark

  C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• High 7.5
  CVE-2026-76879

  Stack-based Buffer Overflow in Wireshark

  C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• High 7.5
  CVE-2026-76880

  Out-of-bounds Write in Wireshark

  RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• High 7.5
  CVE-2026-76928

  NULL Pointer Dereference in Wireshark

  X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 6.6
  CVE-2026-19696

  Out-of-bounds Write in Wireshark

  Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Aug 13, 2026
• Medium 5.5
  CVE-2026-76917

  Heap-based Buffer Overflow in Wireshark

  Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 5.5
  CVE-2026-76918

  Heap-based Buffer Overflow in Wireshark

  SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 5.5
  CVE-2026-76921

  Use After Free in Wireshark

  CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 5.5
  CVE-2026-76922

  NULL Pointer Dereference in Wireshark

  Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 5.5
  CVE-2026-76923

  Out-of-bounds Read in Wireshark

  Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 5.5
  CVE-2026-76924

  Out-of-bounds Read in Wireshark

  Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 5.3
  CVE-2026-76919

  Use of Uninitialized Variable in Wireshark

  ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 4.7
  CVE-2026-19694

  Heap-based Buffer Overflow in Wireshark

  TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu
  Aug 13, 2026
• Medium 4.7
  CVE-2026-19695

  Stack-based Buffer Overflow in Wireshark

  Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service

  Wireshark Foundation Wireshark wireshark gammu Debian Ubuntu
  Aug 13, 2026
• Medium 4.7
  CVE-2026-76881

  NULL Pointer Dereference in Wireshark

  CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 4.7
  CVE-2026-76882

  Out-of-bounds Read in Wireshark

  Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 4.7
  CVE-2026-76883

  Heap-based Buffer Overflow in Wireshark

  Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 4.7
  CVE-2026-76889

  Heap-based Buffer Overflow in Wireshark

  UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 4.7
  CVE-2026-76920

  Out-of-bounds Write in Wireshark

  3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 4.7
  CVE-2026-76927

  NULL Pointer Dereference in Wireshark

  H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Medium 4.7
  CVE-2026-76929

  Out-of-bounds Read in Wireshark

  Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Low 3.1
  CVE-2026-76884

  Buffer Over-read in Wireshark

  ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Low 3.1
  CVE-2026-76885

  Buffer Over-read in Wireshark

  Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Low 3.1
  CVE-2026-76887

  Heap-based Buffer Overflow in Wireshark

  Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Low 3.1
  CVE-2026-76888

  Heap-based Buffer Overflow in Wireshark

  RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Low 3.1
  CVE-2026-76890

  Expired Pointer Dereference in Wireshark

  Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Low 3.1
  CVE-2026-76891

  Expired Pointer Dereference in Wireshark

  Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026
• Low 3.1
  CVE-2026-76926

  Reachable Assertion in Wireshark

  BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

  Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux
  Aug 19, 2026

Revision history

1. 2026-11-12 #15

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

2. 2026-11-10 #14

   Neue Updates von Red Hat aufgenommen

3. 2026-10-20 #13

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

4. 2026-10-19 #12

   Neue Updates von Oracle Linux aufgenommen

5. 2026-10-18 #11

   Neue Updates von Rocky Enterprise Software Foundation, Red Hat und Oracle Linux aufgenommen

6. 2026-10-15 #10

   Neue Updates von Oracle Linux und Red Hat aufgenommen

7. 2026-10-07 #9

   Neue Updates von SUSE aufgenommen

8. 2026-09-28 #8

   Neue Updates von SUSE aufgenommen

9. 2026-09-14 #7

   Neue Updates von Amazon aufgenommen

10. 2026-08-27 #6

    Neue Updates von Debian aufgenommen

11. 2026-08-26 #5

    Neue Updates von openSUSE aufgenommen

12. 2026-08-19 #4

    Referenz(en) aufgenommen: CVE-2026-76929, EUVD-2026-63167, CVE-2026-76918, EUVD-2026-63174, CVE-2026-76889, EUVD-2026-63145, CVE-2026-76888, EUVD-2026-63144, CVE-2026-76887, EUVD-2026-63143, CVE-2026-76886, EUVD-2026-63142, CVE-2026-76917, EUVD-2026-63175, CVE-2026-76884, EUVD-2026-63141, CVE-2026-76883, EUVD-2026-63140, CVE-2026-76882, EUVD-2026-63139, CVE-2026-76879, EUVD-2026-63177, CVE-2026-76880, EUVD-2026-63176, CVE-2026-76881, EUVD-2026-63138, CVE-2026-76885, EUVD-2026-63160, CVE-2026-76926, EUVD-2026-63163, CVE-2026-76890, EUVD-2026-63161, CVE-2026-76891, EUVD-2026-63162, CVE-2026-76927, EUVD-2026-63164, CVE-2026-76924, EUVD-2026-63159, CVE-2026-76923, EUVD-2026-63158, CVE-2026-76928, EUVD-2026-63166, CVE-2026-76921, EUVD-2026-63170, CVE-2026-76920, EUVD-2026-63171, CVE-2026-76919, EUVD-2026-63173, CVE-2026-76922, EUVD-2026-63157

13. 2026-08-16 #3

    CVE-2026-19696 aufgenommen

14. 2026-08-13 #2

    Referenz(en) aufgenommen: CVE-2026-19695, EUVD-2026-57744, CVE-2026-19694, EUVD-2026-57745

15. 2026-08-12 #1

    Initiale Fassung

References

• Wireshark Security vom 2026-08-12
  https://www.wireshark.org/security/
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-64.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-65.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-66.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-67.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-68.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-69.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-70.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-71.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-72.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-73.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-74.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-75.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-76.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-77.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-78.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-79.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-80.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-81.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-82.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-83.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-84.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-85.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-86.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-87.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-88.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-89.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-90.html
• Wireshark Security Advisory vom 2026-08-12
  https://www.wireshark.org/security/wnpa-sec-2026-91.html
• openSUSE Security Update OPENSUSE-SU-2026:11579-1 vom 2026-08-26
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UONW2KX7GYYS7MVUGXE7L23MZC42ZLHT/
• Debian Security Advisory DSA-6471 vom 2026-08-27
  https://security-tracker.debian.org/tracker/DSA-6471-1
• Amazon Linux Security Advisory ALAS2-2026-3905 vom 2026-09-14
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3905.html
• SUSE Security Update SUSE-SU-2026:4379-1 vom 2026-09-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029422.html
• SUSE Security Update SUSE-SU-2026:24013-1 vom 2026-10-07
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/029626.html
• Oracle Linux Security Advisory ELSA-2026-83546 vom 2026-10-16
  https://linux.oracle.com/errata/ELSA-2026-83546.html
• Red Hat Security Advisory RHSA-2026:83657 vom 2026-10-16
  https://access.redhat.com/errata/RHSA-2026:83657
• Rocky Linux Security Advisory RLSA-2026:83546 vom 2026-10-16
  https://errata.build.resf.org/RLSA-2026:83546
• Red Hat Security Advisory RHSA-2026:84721 vom 2026-10-19
  https://access.redhat.com/errata/RHSA-2026:84721
• Oracle Linux Security Advisory ELSA-2026-83657 vom 2026-10-16
  https://linux.oracle.com/errata/ELSA-2026-83657.html
• Rocky Linux Security Advisory RLSA-2026:83657 vom 2026-10-16
  https://errata.build.resf.org/RLSA-2026:83657
• Oracle Linux Security Advisory ELSA-2026-84721 vom 2026-10-19
  https://linux.oracle.com/errata/ELSA-2026-84721.html
• Rocky Linux Security Advisory RLSA-2026:84721 vom 2026-10-20
  https://errata.build.resf.org/RLSA-2026:84721
• Red Hat Security Advisory RHSA-2026:98089 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98089
• Red Hat Security Advisory RHSA-2026:97879 vom 2026-11-10
  https://access.redhat.com/errata/RHSA-2026:97879
• Rocky Linux Security Advisory RLSA-2026:98089 vom 2026-11-13
  https://errata.build.resf.org/RLSA-2026:98089