Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Wireshark ausnutzen, um einen Denial of Service herbeizuführen und potenziell um beliebigen Programmcode auszuführen.
Product
Wireshark ist eine Software zum Mitschneiden von Netzwerkverkehr und zur Analyse von Netzwerkprotokollen.
Vulnerabilities 19
-
High 8.1
Heap-based Buffer Overflow in Wireshark
SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
High 8.1
Heap-based Buffer Overflow in Wireshark
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 5.5
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service
-
Medium 5.5
Heap-based Buffer Overflow in Wireshark
Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 5.5
NULL Pointer Dereference in Wireshark
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
-
Medium 5.5
Use After Free in Wireshark
ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service
-
Medium 5.5
Buffer Over-read in Wireshark
MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 5.5
Missing Release of Memory after Effective Lifetime in Wireshark
IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 5.5
Stack-based Buffer Overflow in Wireshark
Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 5.5
Heap-based Buffer Overflow in Wireshark
IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 5.5
Heap-based Buffer Overflow in Wireshark
RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 5.5
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 5.5
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark
Profile import crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service and possible code execution
-
Medium 5.5
Improperly Controlled Sequential Memory Allocation in Wireshark
USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 5.5
Reachable Assertion in Wireshark
Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 5.5
Heap-based Buffer Overflow in Wireshark
X11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 4.7
Heap-based Buffer Overflow in Wireshark
CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 4.7
Unchecked Input for Loop Condition in Wireshark
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
-
Medium 4.7
Buffer Over-read in Wireshark
Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Revision history
-
#13
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#12
Neue Updates von Red Hat aufgenommen
-
#11
Neue Updates von Oracle Linux aufgenommen
-
#10
Neue Updates von Red Hat aufgenommen
-
#9
Neue Updates von Amazon aufgenommen
-
#8
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#7
Neue Updates von Oracle Linux aufgenommen
-
#6
Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen
-
#5
Neue Updates von Oracle Linux aufgenommen
-
#4
Neue Updates von Debian und openSUSE aufgenommen
-
#3
Referenz(en) aufgenommen: EUVD-2026-88707
-
#2
Referenz(en) aufgenommen: EUVD-2026-88682, EUVD-2026-88702, EUVD-2026-88684, EUVD-2026-88685
-
#1
Initiale Fassung
References
-
Wireshark 4.6.9 Release Notes vom 2026-09-23
https://lists.wireshark.org/archives/wireshark-announce/202609/msg00000.html
-
Wireshark 4.4.19 Release Notes vom 2026-09-23
https://lists.wireshark.org/archives/wireshark-announce/202609/msg00001.html
-
Debian Security Advisory DSA-6541 vom 2026-10-04
https://security-tracker.debian.org/tracker/DSA-6541-1
-
openSUSE Security Update OPENSUSE-SU-2026:11912-1 vom 2026-10-03
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C5DQL3SVTFVDEEP3UXXLRF6HOVKTIQNJ/
-
Oracle Linux Security Advisory ELSA-2026-83546 vom 2026-10-16
https://linux.oracle.com/errata/ELSA-2026-83546.html
-
Rocky Linux Security Advisory RLSA-2026:83546 vom 2026-10-16
https://errata.build.resf.org/RLSA-2026:83546
-
Red Hat Security Advisory RHSA-2026:84721 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:84721
-
Oracle Linux Security Advisory ELSA-2026-84721 vom 2026-10-19
https://linux.oracle.com/errata/ELSA-2026-84721.html
-
Rocky Linux Security Advisory RLSA-2026:84721 vom 2026-10-20
https://errata.build.resf.org/RLSA-2026:84721
-
Amazon Linux Security Advisory ALAS2-2026-4006 vom 2026-10-25
https://alas.aws.amazon.com/AL2/ALAS2-2026-4006.html
-
Red Hat Security Advisory RHSA-2026:93627 vom 2026-11-02
https://access.redhat.com/errata/RHSA-2026:93627
-
Oracle Linux Security Advisory ELSA-2026-93627 vom 2026-11-02
https://linux.oracle.com/errata/ELSA-2026-93627.html
-
Rocky Linux Security Advisory RLSA-2026:93627 vom 2026-11-03
https://errata.build.resf.org/RLSA-2026:93627
-
Red Hat Security Advisory RHSA-2026:97879 vom 2026-11-10
https://access.redhat.com/errata/RHSA-2026:97879
-
Red Hat Security Advisory RHSA-2026:98089 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98089
-
Rocky Linux Security Advisory RLSA-2026:98089 vom 2026-11-13
https://errata.build.resf.org/RLSA-2026:98089