{"id":"CVE-2026-0959","aliases":["AZL-74537","DEBIAN-CVE-2026-0959","DSA-6124-1","EUVD-2026-2431","GHSA-fp4m-fp9q-cxfx","OESA-2026-1545","OESA-2026-1547","OESA-2026-1548","OESA-2026-1549","OESA-2026-1550","SUSE-SU-2026:0237-1","SUSE-SU-2026:1169-1","SUSE-SU-2026:20222-1","UBUNTU-CVE-2026-0959","openSUSE-SU-2026:10056-1","openSUSE-SU-2026:20151-1"],"status":"published","title":"Out-of-bounds Write in Wireshark","description":"IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00213,"percentile":0.11598,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2026-01-14T20:23:28Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["4.4.13-0+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["4.6.3-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.4.7-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-0+deb13u1"}]}],"versions":["4.4.7-1","4.4.8-0exp1","4.4.9-1"]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.3-1"}]}],"versions":["4.4.7-1","4.4.8-0exp1","4.4.9-1","4.6.0-0exp1","4.6.0-1","4.6.0~rc1-0exp1","4.6.0~rc1-0exp2","4.6.1-1","4.6.1-2","4.6.2-1","4.6.2-3"]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-0+deb13u1"}]}],"versions":["4.4.7-1","4.4.8-0exp1","4.4.9-1"],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.14-1.oe2403sp3"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.14-1.oe2203sp4"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.14-1.oe2403"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.14-1.oe2403sp1"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.14-1.oe2403sp2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.14-150600.18.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.14-150600.18.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.14-150600.18.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0-150700.4.19.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-150700.21.8.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-150700.21.8.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0-150700.4.19.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-160000.1.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-160000.1.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.8-1","4.0.10-1","4.0.11-1","4.2.0-1","4.2.2-1","4.2.2-1.1build1","4.2.2-1.1build2","4.2.2-1.1build3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.5-1","4.4.6-2","4.4.6-2build1","4.4.7-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.3-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.13-160000.1.1"}]}],"bundled":8}],"products":[{"vendor":"wireshark","product":"wireshark"},{"vendor":"wireshark foundation","product":"wireshark"}],"references":[{"url":"https://www.wireshark.org/security/wnpa-sec-2026-02.html","tags":["Vendor Advisory","web","report"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/20939","tags":["issue-tracking","permissions-required","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0959","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-fp4m-fp9q-cxfx"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/0xxx/CVE-2026-0959.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-0959","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0960","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0961","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0962","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3203","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1547","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1548","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1549","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1550","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260237-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1256734","tags":["report"]},{"url":"https://bugzilla.suse.com/1256736","tags":["report"]},{"url":"https://bugzilla.suse.com/1256739","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0962","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261169-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231475","tags":["report"]},{"url":"https://bugzilla.suse.com/1231476","tags":["report"]},{"url":"https://bugzilla.suse.com/1233593","tags":["report"]},{"url":"https://bugzilla.suse.com/1233594","tags":["report"]},{"url":"https://bugzilla.suse.com/1237414","tags":["report"]},{"url":"https://bugzilla.suse.com/1244081","tags":["report"]},{"url":"https://bugzilla.suse.com/1249090","tags":["report"]},{"url":"https://bugzilla.suse.com/1254108","tags":["report"]},{"url":"https://bugzilla.suse.com/1254262","tags":["report"]},{"url":"https://bugzilla.suse.com/1254471","tags":["report"]},{"url":"https://bugzilla.suse.com/1254472","tags":["report"]},{"url":"https://bugzilla.suse.com/1256738","tags":["report"]},{"url":"https://bugzilla.suse.com/1258907","tags":["report"]},{"url":"https://bugzilla.suse.com/1258908","tags":["report"]},{"url":"https://bugzilla.suse.com/1258909","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3203","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620222-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1251933","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11626","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-0959","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0959","tags":["report"]},{"url":"https://gitlab.com/wireshark/wireshark/-/merge_requests/23143","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-0959","title":"Out-of-bounds Write in Wireshark","description":"IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service","status":"published","published":"2026-01-14T20:23:28.986Z","modified":"2026-03-27T13:56:59.047Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:20:13.962274Z"}],"euvd":[{"id":"EUVD-2026-2431","description":"IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service","status":"published","published":"2026-01-14T20:23:28Z","modified":"2026-03-27T13:56:59Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:25:27.277964Z"}],"ghsa":[{"id":"GHSA-fp4m-fp9q-cxfx","title":"IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows...","description":"IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service","status":"published","published":"2026-01-14T21:34:10Z","modified":"2026-01-14T21:34:16Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:05:36.917125Z"}],"nvd":[{"id":"CVE-2026-0959","description":"IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service","status":"published","published":"2026-01-14T21:15:52.753Z","modified":"2026-06-17T10:11:41.44Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:12:04.066712Z"}],"osv":[{"id":"CVE-2026-0959","title":"Out-of-bounds Write in Wireshark","description":"IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service","status":"published","published":"2026-01-14T20:23:28.986Z","modified":"2026-10-28T02:31:04.145150646Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:44:53.490346Z"},{"id":"DEBIAN-CVE-2026-0959","description":"IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service","status":"published","published":"2026-01-14T21:15:52.753Z","modified":"2026-10-01T03:00:13.166233518Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:48.440897Z"},{"id":"OESA-2026-1545","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is\ncaptured from wired or wireless (WiFi or Bluetooth) networks, USB devices,\nand many other sources.  It supports dozens of protocol capture file formats\nand understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nWireshark is a widely used network protocol analyzer. In Wireshark versions 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12, there is an out-of-bounds write vulnerability in its IEEE 802.11 protocol dissector. An attacker can exploit this vulnerability by crafting a malicious network packet. During the parsing process, this triggers the vulnerability, causing the Wireshark process to crash, thereby achieving a denial of service attack.(CVE-2026-0959)\n\nWireshark is a widely used network protocol analyzer. In versions 4.6.0 to 4.6.2, a flaw exists in its HTTP3 protocol dissector. When processing network packets of a specific format, it enters an unreachable exit condition (infinite loop), causing the Wireshark process to hang or crash, resulting in a denial of service.(CVE-2026-0960)\n\nWireshark is a widely used network protocol analyzer. A vulnerability exists in the BLF file parser of Wireshark versions 4.6.0 to 4.6.2 and versions 4.4.0 to 4.4.12. An attacker can craft a malicious BLF file to trigger an out-of-bounds write in the parser, leading to a crash and resulting in a denial of service.(CVE-2026-0961)\n\nSOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service(CVE-2026-0962)\n\nUSB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3201)\n\nRF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3203)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.302546147Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1547","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is\ncaptured from wired or wireless (WiFi or Bluetooth) networks, USB devices,\nand many other sources.  It supports dozens of protocol capture file formats\nand understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nWireshark is a widely used network protocol analyzer. In Wireshark versions 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12, there is an out-of-bounds write vulnerability in its IEEE 802.11 protocol dissector. An attacker can exploit this vulnerability by crafting a malicious network packet. During the parsing process, this triggers the vulnerability, causing the Wireshark process to crash, thereby achieving a denial of service attack.(CVE-2026-0959)\n\nWireshark is a widely used network protocol analyzer. In versions 4.6.0 to 4.6.2, a flaw exists in its HTTP3 protocol dissector. When processing network packets of a specific format, it enters an unreachable exit condition (infinite loop), causing the Wireshark process to hang or crash, resulting in a denial of service.(CVE-2026-0960)\n\nWireshark is a widely used network protocol analyzer. A vulnerability exists in the BLF file parser of Wireshark versions 4.6.0 to 4.6.2 and versions 4.4.0 to 4.4.12. An attacker can craft a malicious BLF file to trigger an out-of-bounds write in the parser, leading to a crash and resulting in a denial of service.(CVE-2026-0961)\n\nSOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service(CVE-2026-0962)\n\nUSB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3201)\n\nRF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3203)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.703828517Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1548","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is\ncaptured from wired or wireless (WiFi or Bluetooth) networks, USB devices,\nand many other sources.  It supports dozens of protocol capture file formats\nand understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nWireshark is a widely used network protocol analyzer. In Wireshark versions 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12, there is an out-of-bounds write vulnerability in its IEEE 802.11 protocol dissector. An attacker can exploit this vulnerability by crafting a malicious network packet. During the parsing process, this triggers the vulnerability, causing the Wireshark process to crash, thereby achieving a denial of service attack.(CVE-2026-0959)\n\nWireshark is a widely used network protocol analyzer. In versions 4.6.0 to 4.6.2, a flaw exists in its HTTP3 protocol dissector. When processing network packets of a specific format, it enters an unreachable exit condition (infinite loop), causing the Wireshark process to hang or crash, resulting in a denial of service.(CVE-2026-0960)\n\nWireshark is a widely used network protocol analyzer. A vulnerability exists in the BLF file parser of Wireshark versions 4.6.0 to 4.6.2 and versions 4.4.0 to 4.4.12. An attacker can craft a malicious BLF file to trigger an out-of-bounds write in the parser, leading to a crash and resulting in a denial of service.(CVE-2026-0961)\n\nSOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service(CVE-2026-0962)\n\nUSB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3201)\n\nRF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3203)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.692308192Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1549","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is\ncaptured from wired or wireless (WiFi or Bluetooth) networks, USB devices,\nand many other sources.  It supports dozens of protocol capture file formats\nand understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nWireshark is a widely used network protocol analyzer. In Wireshark versions 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12, there is an out-of-bounds write vulnerability in its IEEE 802.11 protocol dissector. An attacker can exploit this vulnerability by crafting a malicious network packet. During the parsing process, this triggers the vulnerability, causing the Wireshark process to crash, thereby achieving a denial of service attack.(CVE-2026-0959)\n\nWireshark is a widely used network protocol analyzer. In versions 4.6.0 to 4.6.2, a flaw exists in its HTTP3 protocol dissector. When processing network packets of a specific format, it enters an unreachable exit condition (infinite loop), causing the Wireshark process to hang or crash, resulting in a denial of service.(CVE-2026-0960)\n\nWireshark is a widely used network protocol analyzer. A vulnerability exists in the BLF file parser of Wireshark versions 4.6.0 to 4.6.2 and versions 4.4.0 to 4.4.12. An attacker can craft a malicious BLF file to trigger an out-of-bounds write in the parser, leading to a crash and resulting in a denial of service.(CVE-2026-0961)\n\nSOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service(CVE-2026-0962)\n\nUSB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3201)\n\nRF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3203)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.853020785Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1550","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is\ncaptured from wired or wireless (WiFi or Bluetooth) networks, USB devices,\nand many other sources.  It supports dozens of protocol capture file formats\nand understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nWireshark is a widely used network protocol analyzer. In Wireshark versions 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12, there is an out-of-bounds write vulnerability in its IEEE 802.11 protocol dissector. An attacker can exploit this vulnerability by crafting a malicious network packet. During the parsing process, this triggers the vulnerability, causing the Wireshark process to crash, thereby achieving a denial of service attack.(CVE-2026-0959)\n\nWireshark is a widely used network protocol analyzer. In versions 4.6.0 to 4.6.2, a flaw exists in its HTTP3 protocol dissector. When processing network packets of a specific format, it enters an unreachable exit condition (infinite loop), causing the Wireshark process to hang or crash, resulting in a denial of service.(CVE-2026-0960)\n\nWireshark is a widely used network protocol analyzer. A vulnerability exists in the BLF file parser of Wireshark versions 4.6.0 to 4.6.2 and versions 4.4.0 to 4.4.12. An attacker can craft a malicious BLF file to trigger an out-of-bounds write in the parser, leading to a crash and resulting in a denial of service.(CVE-2026-0961)\n\nSOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service(CVE-2026-0962)\n\nUSB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3201)\n\nRF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3203)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.687545573Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"UBUNTU-CVE-2026-0959","description":"IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service","status":"published","published":"2026-01-14T21:15:00Z","modified":"2026-04-22T16:18:22.363117Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:58.519486Z"},{"id":"AZL-74537","title":"CVE-2026-0959 affecting package wireshark 4.4.7-2","description":"IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service","status":"published","published":"2026-01-14T21:15:52Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:24.456773Z"},{"id":"DSA-6124-1","title":"wireshark - security update","status":"published","published":"2026-02-08T00:00:00Z","modified":"2026-02-08T20:30:10.393427Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"openSUSE-SU-2026:10056-1","title":"libwireshark19-4.6.3-1.1 on GA media","description":"These are all security issues fixed in the libwireshark19-4.6.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-01-15T00:00:00Z","modified":"2026-03-23T04:54:24.227716Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20151-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nUpdate to Wireshark 4.4.13:\n\n- CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).\n- CVE-2025-13499: Kafka dissector crash (bsc#1254108).\n- CVE-2025-13945: HTTP3 dissector crash (bsc#1254471).\n- CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).\n- CVE-2025-9817: SSH dissector crash (bsc#1249090).\n- CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).\n- CVE-2026-0961: BLF file parser crash (bsc#1256738).\n- CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).\n\nFull changelog:\n\nhttps://www.wireshark.org/docs/relnotes/wireshark-4.4.13.html\n\n","status":"published","published":"2026-02-02T12:56:02Z","modified":"2026-03-23T04:54:46.204154Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:0237-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\n- CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).\n- CVE-2026-0960: HTTP3 dissector infinite loop (bsc#1256736).\n- CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).\n","status":"published","published":"2026-01-22T12:26:09Z","modified":"2026-03-23T04:52:03.461966Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:1169-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nUpdate Wireshark to version 4.6.4 (jsc#PED-15400).\n\n- CVE-2024-9780: ITS dissector crash (bsc#1231475).\n- CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash (bsc#1231476).\n- CVE-2024-11595: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (bsc#1233594).\n- CVE-2024-11596: Buffer Over-read in Wireshark (bsc#1233593).\n- CVE-2025-1492: Uncontrolled Recursion in Wireshark (bsc#1237414).\n- CVE-2025-5601: Column handling crashes in Wireshark allows denial of service (bsc#1244081).\n- CVE-2025-9817: NULL Pointer Dereference in ssh dissector (bsc#1249090).\n- CVE-2025-13499: a malformed packet can lead to a Kafka dissector crash (bsc#1254108).\n- CVE-2025-13674: injecting a malformed packet can cause a crash (bsc#1254262).\n- CVE-2025-13945: HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (bsc#1254471).\n- CVE-2025-13946: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of\n  service (bsc#1254472).\n- CVE-2026-0959: denial of service via IEEE 802.11 protocol dissector crash (bsc#1256734).\n- CVE-2026-0960: denial of Service via HTTP3 protocol dissector infinite loop (bsc#1256736).\n- CVE-2026-0961: denial of Service vulnerability in BLF file parser (bsc#1256738).\n- CVE-2026-0962: denial of Service via SOME/IP-SD protocol dissector crash (bsc#1256739).\n- CVE-2026-3201: missing limit checks in USB HID protocol dissector's `parse_report_descriptor` function can lead to\n  memory exhaustion (bsc#1258907).\n- CVE-2026-3202: missing checks in NTS-KE protocol dissector can lead to crash (bsc#1258908).\n- CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory access and\n  crash (bsc#1258909).\n\nAlso libvirt was rebuilt against wireshark for the libvirt plugin.\n","status":"published","published":"2026-04-02T08:29:30Z","modified":"2026-04-03T07:45:38.640463Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:20222-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nUpdate to Wireshark 4.4.13:\n\n- CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).\n- CVE-2025-13499: Kafka dissector crash (bsc#1254108).\n- CVE-2025-13945: HTTP3 dissector crash (bsc#1254471).\n- CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).\n- CVE-2025-9817: SSH dissector crash (bsc#1249090).\n- CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).\n- CVE-2026-0961: BLF file parser crash (bsc#1256738).\n- CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).\n\nFull changelog:\n\nhttps://www.wireshark.org/docs/relnotes/wireshark-4.4.13.html\n\n","status":"published","published":"2026-02-02T12:45:13Z","modified":"2026-03-23T04:52:45.283342Z","updated_at":"2026-11-02T15:54:01.610851Z"}]}}