wireshark

wireshark

Debian BookwormDebian Bookworm
Debian Bookwormdeb.debian.org
www.wireshark.orgwww.wireshark.org
Releases2
Frequency4 months 3 days
Last Release
network traffic analyzer - meta-package
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2026-9759NVD↗
>= 4.4.0, < 4.4.16, >= 4.6.0, < 4.6.65.5 MEDIUM—

ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service

CVE-2026-6525NVD↗
>= 4.6.0, < 4.6.55.5 MEDIUM—

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4

CVE-2026-5656NVD↗
>= 4.4.0, < 4.4.15, >= 4.6.0, < 4.6.57 HIGH—

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVE-2026-5404NVD↗
>= 4.4.0, < 4.4.15, >= 4.6.0, < 4.6.54.7 MEDIUM—

K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-5405NVD↗
>= 4.4.0, < 4.4.15, >= 4.6.0, < 4.6.57.8 HIGH—

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVE-2026-5403NVD↗
>= 4.4.0, < 4.4.15, >= 4.6.0, < 4.6.57.8 HIGH—

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVE-2026-6870NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6869NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6867NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6538NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6537NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6533NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6528NVD↗
>= 4.6.0, <= 4.6.45.5 MEDIUM—

TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service

CVE-2026-6536NVD↗
>= 4.6.0, <= 4.6.45.5 MEDIUM—

DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4

CVE-2026-6535NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6534NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6532NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6531NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6530NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6529NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6527NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6524NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6519NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6520NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6521NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6522NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6523NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6526NVD↗
>= 4.6.0, <= 4.6.45.5 MEDIUM—

RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4

CVE-2026-5657NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-5409NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-5407NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-5408NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-5655NVD↗
>= 4.6.0, <= 4.6.45.5 MEDIUM—

SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service

CVE-2026-5654NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-5653NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-5299NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-5401NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-5402NVD↗
>= 4.6.0, <= 4.6.48.8 HIGH—

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution

CVE-2026-5406NVD↗
>= 4.4.0, <= 4.4.14, >= 4.6.0, <= 4.6.45.5 MEDIUM—

FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-7379NVD↗
>= 4.4.0, < 4.4.15, >= 4.6.0, < 4.6.55.5 MEDIUM—

Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-7378NVD↗
>= 4.4.0, < 4.4.15, >= 4.6.0, < 4.6.55.5 MEDIUM—

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-7376NVD↗
>= 4.4.0, < 4.4.15, >= 4.6.0, < 4.6.55.5 MEDIUM—

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-7375NVD↗
>= 4.4.0, < 4.4.15, >= 4.6.0, < 4.6.55.5 MEDIUM—

UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-6868NVD↗
>= 4.4.0, < 4.4.15, >= 4.6.0, < 4.6.55.5 MEDIUM—

HTTP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

CVE-2026-3201NVD↗
>= 4.4.0, < 4.4.14, >= 4.6.0, < 4.6.44.7 MEDIUM—

USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

CVE-2026-3202NVD↗
>= 4.6.0, < 4.6.44.7 MEDIUM—

NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service

CVE-2026-3203NVD↗
>= 4.4.0, < 4.4.14, >= 4.6.0, < 4.6.45.5 MEDIUM—

RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

CVE-2026-0961NVD↗
>= 4.4.0, < 4.4.13, >= 4.6.0, < 4.6.35.5 MEDIUM—

BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service

CVE-2026-0962NVD↗
>= 4.2.2, < 4.4.13, >= 4.6.0, < 4.6.35.3 MEDIUM—

SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service

CVE-2026-0959NVD↗
>= 4.4.0, < 4.4.13, >= 4.6.0, < 4.6.35.3 MEDIUM—

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service

CVE-2026-0960NVD↗
>= 4.4.0, < 4.4.13, >= 4.6.0, < 4.6.34.7 MEDIUM—

HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service