{"id":"CVE-2026-3203","aliases":["ALPINE-CVE-2026-3203","ALSA-2026:9666","AZL-78339","DEBIAN-CVE-2026-3203","EUVD-2026-8662","GHSA-qrr9-2772-633f","OESA-2026-1545","OESA-2026-1547","OESA-2026-1548","OESA-2026-1549","OESA-2026-1550","RHSA-2026:26182","RHSA-2026:9666","RLSA-2026:9666","SUSE-SU-2026:1169-1","SUSE-SU-2026:21559-1","UBUNTU-CVE-2026-3203","openSUSE-SU-2026:10274-1","openSUSE-SU-2026:20685-1"],"status":"published","title":"Buffer Over-read in Wireshark","description":"RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00189,"percentile":0.08532,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-126"],"published":"2026-02-25T14:36:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"wireshark","fixed_in":["4.6.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"wireshark","fixed_in":["4.6.4-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["4.4.14-0+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["4.6.4-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"4.6.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"4.6.4-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-4.el10_1.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"wireshark-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-4.el10_1.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-4.el10_1.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.4.7-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.10-1","4.0.11-1","4.0.11-1~deb12u1","4.0.17-0+deb12u1","4.0.17-0+deb12u2","4.0.17-0+deb12u3","4.0.3-1","4.0.5-1~exp1","4.0.6-1","4.0.6-1~deb12u1","4.0.6-1~exp1","4.0.7-1","4.0.8-1","4.2.0-1","4.2.0-1~exp0","4.2.0~rc3-1~exp1","4.2.2-1","4.2.2-1.1","4.2.2-1.1~exp1","4.2.4-1","4.2.5-1","4.2.5-2","4.2.6-1","4.4.0-0exp1","4.4.0-0exp2","4.4.0-1","4.4.1-1","4.4.2-1","4.4.3-1","4.4.4-1","4.4.5-1","4.4.6-1","4.4.6-2","4.4.7-0exp1","4.4.7-1","4.4.8-0exp1","4.4.9-1","4.6.0-0exp1","4.6.0-1","4.6.0~rc1-0exp1","4.6.0~rc1-0exp2","4.6.1-1","4.6.1-2","4.6.2-1","4.6.2-3","4.6.3-1","4.6.4-1","4.6.5-1","4.6.6-1","4.6.6-2"]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.14-0+deb13u1"}]}],"versions":["4.4.13-0+deb13u1","4.4.7-1","4.4.8-0exp1","4.4.9-1"]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-1"}]}],"versions":["4.4.7-1","4.4.8-0exp1","4.4.9-1","4.6.0-0exp1","4.6.0-1","4.6.0~rc1-0exp1","4.6.0~rc1-0exp2","4.6.1-1","4.6.1-2","4.6.2-1","4.6.2-3","4.6.3-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.14-1.oe2403sp3"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.14-1.oe2203sp4"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.14-1.oe2403"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.14-1.oe2403sp1"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.14-1.oe2403sp2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-3.el10_0.4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"wireshark-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-3.el10_0.4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"wireshark-cli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-3.el10_0.4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-3.el10_0.4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"wireshark-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-3.el10_0.4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-3.el10_0.4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-4.el10_1.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"wireshark-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-4.el10_1.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"wireshark-cli-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-4.el10_1.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"wireshark-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-4.el10_1.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"wireshark-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-4.el10_1.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-4.el10_1.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:10","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.4.2-4.el10_1.4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0-150700.4.19.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-150700.21.8.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-150700.21.8.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0-150700.4.19.1"}]}],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.2-1","1.10.3-1","1.10.5-1ubuntu1","1.10.5-2","1.10.6-1","1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1","2.6.3-1~ubuntu14.04.1","2.6.4-2~ubuntu14.04.1","2.6.5-1~ubuntu14.04.1","2.6.6-1~ubuntu14.04.0","2.6.8-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm2","2.6.10-1~ubuntu14.04.0~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.7+g7fc8978-1","1.12.8+g5b6e543-2","2.0.1+g59ea380-3build1","2.0.2+ga16e22e-1","2.2.6+g32dac6a-2ubuntu0.16.04","2.6.3-1~ubuntu16.04.1","2.6.4-2~ubuntu16.04.0","2.6.5-1~ubuntu16.04.0","2.6.6-1~ubuntu16.04.0","2.6.8-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0+esm1","2.6.10-1~ubuntu16.04.0+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1","2.6.3-1~ubuntu18.04.1","2.6.4-2~ubuntu18.04.0","2.6.5-1~ubuntu18.04.0","2.6.6-1~ubuntu18.04.0","2.6.8-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0+esm1","2.6.10-1~ubuntu18.04.0+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.5-1","3.0.7-1","3.2.1-1","3.2.2-1","3.2.3-1","3.2.3-1ubuntu0.1~esm1","3.2.3-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4.7-1~exp1","3.4.9-1","3.6.2-1ubuntu1","3.6.2-2","3.6.2-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.8-1","4.0.10-1","4.0.11-1","4.2.0-1","4.2.2-1","4.2.2-1.1build1","4.2.2-1.1build2","4.2.2-1.1build3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.5-1","4.4.6-2","4.4.6-2build1","4.4.7-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.6.4-1","4.6.6-1","4.6.6-2","4.6.6-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.7-1","4.6.0-1","4.6.1-2","4.6.2-3","4.6.3-1","4.6.4-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-1.1"}]}],"bundled":3}],"products":[{"vendor":"wireshark","product":"wireshark"},{"vendor":"wireshark foundation","product":"wireshark"}],"references":[{"url":"https://www.wireshark.org/security/wnpa-sec-2026-07.html","tags":["Vendor Advisory","web","article","report"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/21009","tags":["issue-tracking","permissions-required","Issue Tracking","report","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3203","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-qrr9-2772-633f"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-3203","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9666","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3201","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3203","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442639","tags":["report"]},{"url":"https://bugzilla.redhat.com/2442641","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-9666.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3203.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-3203","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0959","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0960","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0961","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0962","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3201","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1547","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1548","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1549","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1550","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26182","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464276","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26182.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3201","tags":["advisory"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/20972","tags":["article"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2026-05.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3203","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5405","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5405","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5405","tags":["advisory"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/21105","tags":["article"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2026-17.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5656","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5656","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5656","tags":["advisory"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/21115","tags":["article"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2026-21.html","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9666.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:9666","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261169-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231475","tags":["report"]},{"url":"https://bugzilla.suse.com/1231476","tags":["report"]},{"url":"https://bugzilla.suse.com/1233593","tags":["report"]},{"url":"https://bugzilla.suse.com/1233594","tags":["report"]},{"url":"https://bugzilla.suse.com/1237414","tags":["report"]},{"url":"https://bugzilla.suse.com/1244081","tags":["report"]},{"url":"https://bugzilla.suse.com/1249090","tags":["report"]},{"url":"https://bugzilla.suse.com/1254108","tags":["report"]},{"url":"https://bugzilla.suse.com/1254262","tags":["report"]},{"url":"https://bugzilla.suse.com/1254471","tags":["report"]},{"url":"https://bugzilla.suse.com/1254472","tags":["report"]},{"url":"https://bugzilla.suse.com/1256734","tags":["report"]},{"url":"https://bugzilla.suse.com/1256736","tags":["report"]},{"url":"https://bugzilla.suse.com/1256738","tags":["report"]},{"url":"https://bugzilla.suse.com/1256739","tags":["report"]},{"url":"https://bugzilla.suse.com/1258907","tags":["report"]},{"url":"https://bugzilla.suse.com/1258908","tags":["report"]},{"url":"https://bugzilla.suse.com/1258909","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3203","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621559-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263726","tags":["report"]},{"url":"https://bugzilla.suse.com/1263728","tags":["report"]},{"url":"https://bugzilla.suse.com/1263729","tags":["report"]},{"url":"https://bugzilla.suse.com/1263731","tags":["report"]},{"url":"https://bugzilla.suse.com/1263732","tags":["report"]},{"url":"https://bugzilla.suse.com/1263733","tags":["report"]},{"url":"https://bugzilla.suse.com/1263734","tags":["report"]},{"url":"https://bugzilla.suse.com/1263735","tags":["report"]},{"url":"https://bugzilla.suse.com/1263736","tags":["report"]},{"url":"https://bugzilla.suse.com/1263737","tags":["report"]},{"url":"https://bugzilla.suse.com/1263739","tags":["report"]},{"url":"https://bugzilla.suse.com/1263741","tags":["report"]},{"url":"https://bugzilla.suse.com/1263742","tags":["report"]},{"url":"https://bugzilla.suse.com/1263743","tags":["report"]},{"url":"https://bugzilla.suse.com/1263744","tags":["report"]},{"url":"https://bugzilla.suse.com/1263745","tags":["report"]},{"url":"https://bugzilla.suse.com/1263746","tags":["report"]},{"url":"https://bugzilla.suse.com/1263747","tags":["report"]},{"url":"https://bugzilla.suse.com/1263749","tags":["report"]},{"url":"https://bugzilla.suse.com/1263750","tags":["report"]},{"url":"https://bugzilla.suse.com/1263751","tags":["report"]},{"url":"https://bugzilla.suse.com/1263752","tags":["report"]},{"url":"https://bugzilla.suse.com/1263753","tags":["report"]},{"url":"https://bugzilla.suse.com/1263754","tags":["report"]},{"url":"https://bugzilla.suse.com/1263756","tags":["report"]},{"url":"https://bugzilla.suse.com/1263757","tags":["report"]},{"url":"https://bugzilla.suse.com/1263762","tags":["report"]},{"url":"https://bugzilla.suse.com/1263765","tags":["report"]},{"url":"https://bugzilla.suse.com/1263766","tags":["report"]},{"url":"https://bugzilla.suse.com/1263767","tags":["report"]},{"url":"https://bugzilla.suse.com/1263809","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6869","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-3203","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-3203","title":"Buffer Over-read in Wireshark","description":"RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service","status":"published","published":"2026-02-25T14:36:00.984Z","modified":"2026-09-17T18:35:21.214Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T13:48:58.05327Z"}],"euvd":[{"id":"EUVD-2026-8662","description":"RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service","status":"published","published":"2026-02-25T14:36:00Z","modified":"2026-09-17T18:35:21Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T17:28:10.833571Z"}],"ghsa":[{"id":"GHSA-qrr9-2772-633f","title":"RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows...","description":"RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service","status":"published","published":"2026-02-25T15:31:43Z","modified":"2026-02-25T15:31:43Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T15:06:22.176933Z"}],"nvd":[{"id":"CVE-2026-3203","description":"RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service","status":"published","published":"2026-02-25T15:20:55.973Z","modified":"2026-06-17T10:43:12.267Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T14:12:07.027269Z"}],"osv":[{"id":"ALPINE-CVE-2026-3203","description":"RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service","status":"published","published":"2026-02-25T15:20:55.973Z","modified":"2026-11-03T06:33:02.302775486Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:15:53.944853Z"},{"id":"CVE-2026-3203","title":"Buffer Over-read in Wireshark","description":"RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service","status":"published","published":"2026-02-25T14:36:00.984Z","modified":"2026-10-28T02:30:32.12957101Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-126"],"updated_at":"2026-11-02T15:45:01.218144Z"},{"id":"DEBIAN-CVE-2026-3203","description":"RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service","status":"published","published":"2026-02-25T15:20:55.973Z","modified":"2026-10-01T03:03:03.439246463Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:54.232518Z"},{"id":"OESA-2026-1545","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is\ncaptured from wired or wireless (WiFi or Bluetooth) networks, USB devices,\nand many other sources.  It supports dozens of protocol capture file formats\nand understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nWireshark is a widely used network protocol analyzer. In Wireshark versions 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12, there is an out-of-bounds write vulnerability in its IEEE 802.11 protocol dissector. An attacker can exploit this vulnerability by crafting a malicious network packet. During the parsing process, this triggers the vulnerability, causing the Wireshark process to crash, thereby achieving a denial of service attack.(CVE-2026-0959)\n\nWireshark is a widely used network protocol analyzer. In versions 4.6.0 to 4.6.2, a flaw exists in its HTTP3 protocol dissector. When processing network packets of a specific format, it enters an unreachable exit condition (infinite loop), causing the Wireshark process to hang or crash, resulting in a denial of service.(CVE-2026-0960)\n\nWireshark is a widely used network protocol analyzer. A vulnerability exists in the BLF file parser of Wireshark versions 4.6.0 to 4.6.2 and versions 4.4.0 to 4.4.12. An attacker can craft a malicious BLF file to trigger an out-of-bounds write in the parser, leading to a crash and resulting in a denial of service.(CVE-2026-0961)\n\nSOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service(CVE-2026-0962)\n\nUSB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3201)\n\nRF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3203)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.302546147Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1547","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is\ncaptured from wired or wireless (WiFi or Bluetooth) networks, USB devices,\nand many other sources.  It supports dozens of protocol capture file formats\nand understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nWireshark is a widely used network protocol analyzer. In Wireshark versions 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12, there is an out-of-bounds write vulnerability in its IEEE 802.11 protocol dissector. An attacker can exploit this vulnerability by crafting a malicious network packet. During the parsing process, this triggers the vulnerability, causing the Wireshark process to crash, thereby achieving a denial of service attack.(CVE-2026-0959)\n\nWireshark is a widely used network protocol analyzer. In versions 4.6.0 to 4.6.2, a flaw exists in its HTTP3 protocol dissector. When processing network packets of a specific format, it enters an unreachable exit condition (infinite loop), causing the Wireshark process to hang or crash, resulting in a denial of service.(CVE-2026-0960)\n\nWireshark is a widely used network protocol analyzer. A vulnerability exists in the BLF file parser of Wireshark versions 4.6.0 to 4.6.2 and versions 4.4.0 to 4.4.12. An attacker can craft a malicious BLF file to trigger an out-of-bounds write in the parser, leading to a crash and resulting in a denial of service.(CVE-2026-0961)\n\nSOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service(CVE-2026-0962)\n\nUSB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3201)\n\nRF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3203)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.703828517Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1548","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is\ncaptured from wired or wireless (WiFi or Bluetooth) networks, USB devices,\nand many other sources.  It supports dozens of protocol capture file formats\nand understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nWireshark is a widely used network protocol analyzer. In Wireshark versions 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12, there is an out-of-bounds write vulnerability in its IEEE 802.11 protocol dissector. An attacker can exploit this vulnerability by crafting a malicious network packet. During the parsing process, this triggers the vulnerability, causing the Wireshark process to crash, thereby achieving a denial of service attack.(CVE-2026-0959)\n\nWireshark is a widely used network protocol analyzer. In versions 4.6.0 to 4.6.2, a flaw exists in its HTTP3 protocol dissector. When processing network packets of a specific format, it enters an unreachable exit condition (infinite loop), causing the Wireshark process to hang or crash, resulting in a denial of service.(CVE-2026-0960)\n\nWireshark is a widely used network protocol analyzer. A vulnerability exists in the BLF file parser of Wireshark versions 4.6.0 to 4.6.2 and versions 4.4.0 to 4.4.12. An attacker can craft a malicious BLF file to trigger an out-of-bounds write in the parser, leading to a crash and resulting in a denial of service.(CVE-2026-0961)\n\nSOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service(CVE-2026-0962)\n\nUSB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3201)\n\nRF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3203)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.692308192Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1549","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is\ncaptured from wired or wireless (WiFi or Bluetooth) networks, USB devices,\nand many other sources.  It supports dozens of protocol capture file formats\nand understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nWireshark is a widely used network protocol analyzer. In Wireshark versions 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12, there is an out-of-bounds write vulnerability in its IEEE 802.11 protocol dissector. An attacker can exploit this vulnerability by crafting a malicious network packet. During the parsing process, this triggers the vulnerability, causing the Wireshark process to crash, thereby achieving a denial of service attack.(CVE-2026-0959)\n\nWireshark is a widely used network protocol analyzer. In versions 4.6.0 to 4.6.2, a flaw exists in its HTTP3 protocol dissector. When processing network packets of a specific format, it enters an unreachable exit condition (infinite loop), causing the Wireshark process to hang or crash, resulting in a denial of service.(CVE-2026-0960)\n\nWireshark is a widely used network protocol analyzer. A vulnerability exists in the BLF file parser of Wireshark versions 4.6.0 to 4.6.2 and versions 4.4.0 to 4.4.12. An attacker can craft a malicious BLF file to trigger an out-of-bounds write in the parser, leading to a crash and resulting in a denial of service.(CVE-2026-0961)\n\nSOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service(CVE-2026-0962)\n\nUSB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3201)\n\nRF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3203)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.853020785Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1550","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is\ncaptured from wired or wireless (WiFi or Bluetooth) networks, USB devices,\nand many other sources.  It supports dozens of protocol capture file formats\nand understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nWireshark is a widely used network protocol analyzer. In Wireshark versions 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12, there is an out-of-bounds write vulnerability in its IEEE 802.11 protocol dissector. An attacker can exploit this vulnerability by crafting a malicious network packet. During the parsing process, this triggers the vulnerability, causing the Wireshark process to crash, thereby achieving a denial of service attack.(CVE-2026-0959)\n\nWireshark is a widely used network protocol analyzer. In versions 4.6.0 to 4.6.2, a flaw exists in its HTTP3 protocol dissector. When processing network packets of a specific format, it enters an unreachable exit condition (infinite loop), causing the Wireshark process to hang or crash, resulting in a denial of service.(CVE-2026-0960)\n\nWireshark is a widely used network protocol analyzer. A vulnerability exists in the BLF file parser of Wireshark versions 4.6.0 to 4.6.2 and versions 4.4.0 to 4.4.12. An attacker can craft a malicious BLF file to trigger an out-of-bounds write in the parser, leading to a crash and resulting in a denial of service.(CVE-2026-0961)\n\nSOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service(CVE-2026-0962)\n\nUSB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3201)\n\nRF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service(CVE-2026-3203)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.687545573Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"RHSA-2026:26182","title":"Red Hat Security Advisory: wireshark security update","status":"published","published":"2026-06-17T10:08:32Z","modified":"2026-07-09T10:09:59Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:9666","title":"Red Hat Security Advisory: wireshark security update","status":"published","published":"2026-04-23T10:15:32Z","modified":"2026-07-09T10:15:51Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RLSA-2026:9666","title":"Moderate: wireshark security update","description":"The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.\n\nSecurity Fix(es):\n\n* wireshark: Buffer Over-read in Wireshark (CVE-2026-3203)\n\n* wireshark: Improperly Controlled Sequential Memory Allocation in Wireshark (CVE-2026-3201)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-24T12:06:29.039644Z","modified":"2026-04-24T12:30:10.403364Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2026-3203","description":"RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service","status":"published","published":"2026-02-25T15:20:00Z","modified":"2026-10-17T12:58:09.416569059Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:16.036833Z"},{"id":"ALSA-2026:9666","title":"Moderate: wireshark security update","description":"The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.  \n\nSecurity Fix(es):  \n\n  * wireshark: Buffer Over-read in Wireshark (CVE-2026-3203)\n  * wireshark: Improperly Controlled Sequential Memory Allocation in Wireshark (CVE-2026-3201)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-22T00:00:00Z","modified":"2026-10-29T11:58:13.82162Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"AZL-78339","title":"CVE-2026-3203 affecting package wireshark 4.4.7-2","description":"RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service","status":"published","published":"2026-02-25T15:20:55Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:24.626116Z"},{"id":"openSUSE-SU-2026:10274-1","title":"libwireshark19-4.6.4-1.1 on GA media","description":"These are all security issues fixed in the libwireshark19-4.6.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-02-27T00:00:00Z","modified":"2026-03-23T04:54:38.124091Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20685-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues\n\n- CVE-2026-3201: missing limit checks in USB HID protocol dissector's `parse_report_descriptor` function can lead to\n  memory exhaustion (bsc#1258907).\n- CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory access and\n  crash (bsc#1258909).\n- CVE-2026-5299: ICMPv6 dissector crash (bsc#1263757).\n- CVE-2026-5401: AFP dissector crash (bsc#1263756).\n- CVE-2026-5403: SBC audio codec crash (bsc#1263765).\n- CVE-2026-5404: K12 RF5 file parser crash (bsc#1263766).\n- CVE-2026-5405: RDP dissector crash (bsc#1263767).\n- CVE-2026-5406: FC-SWILS dissector crash (bsc#1263754).\n- CVE-2026-5407: SMB2 dissector infinite loop (bsc#1263753).\n- CVE-2026-5408: BT-DHT dissector crash (bsc#1263752).\n- CVE-2026-5409: Monero dissector crash (bsc#1263751).\n- CVE-2026-5653: DCP-ETSI dissector crash (bsc#1263750).\n- CVE-2026-5654: AMR-NB audio codec crash (bsc#1263749).\n- CVE-2026-5656: Profile import crash and possible code execution (bsc#1263809).\n- CVE-2026-5657: iLBC audio codec crash (bsc#1263747).\n- CVE-2026-6519: MBIM protocol dissector infinite loop (bsc#1263746).\n- CVE-2026-6520: OpenFlow v6 protocol dissector infinite loop (bsc#1263745).\n- CVE-2026-6521: OpenFlow v5 protocol dissector infinite loops (bsc#1263744).\n- CVE-2026-6522: RPKI-Router protocol dissector infinite loop (bsc#1263743).\n- CVE-2026-6523: GNW protocol dissector infinite loop (bsc#1263742).\n- CVE-2026-6524: MySQL protocol dissector crash (bsc#1263741).\n- CVE-2026-6527: ASN.1 PER dissector crash (bsc#1263739).\n- CVE-2026-6529: iLBC audio codec crash (bsc#1263737).\n- CVE-2026-6530: DCP-ETSI protocol dissector crash (bsc#1263736).\n- CVE-2026-6531: SANE protocol dissector infinite loop (bsc#1263735).\n- CVE-2026-6532: Kismet protocol dissector crash (bsc#1263734).\n- CVE-2026-6533: Dissection engine LZ77 decompression crash (bsc#1263733).\n- CVE-2026-6534: USB HID dissector infinite loop (bsc#1263732).\n- CVE-2026-6535: Dissection engine zlib decompression crash (bsc#1263731).\n- CVE-2026-6537: ZigBee dissector crash (bsc#1263729).\n- CVE-2026-6538: BEEP dissector crash (bsc#1263728).\n- CVE-2026-6868: HTTP protocol dissector crash (bsc#1263762).\n- CVE-2026-6869: WebSocket protocol dissector crash (bsc#1263726).\n\nChanges for wireshark:\n\n- Updated to 4.4.15\n","status":"published","published":"2026-05-06T00:14:18Z","modified":"2026-05-09T18:24:34.756798Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:1169-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nUpdate Wireshark to version 4.6.4 (jsc#PED-15400).\n\n- CVE-2024-9780: ITS dissector crash (bsc#1231475).\n- CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash (bsc#1231476).\n- CVE-2024-11595: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (bsc#1233594).\n- CVE-2024-11596: Buffer Over-read in Wireshark (bsc#1233593).\n- CVE-2025-1492: Uncontrolled Recursion in Wireshark (bsc#1237414).\n- CVE-2025-5601: Column handling crashes in Wireshark allows denial of service (bsc#1244081).\n- CVE-2025-9817: NULL Pointer Dereference in ssh dissector (bsc#1249090).\n- CVE-2025-13499: a malformed packet can lead to a Kafka dissector crash (bsc#1254108).\n- CVE-2025-13674: injecting a malformed packet can cause a crash (bsc#1254262).\n- CVE-2025-13945: HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (bsc#1254471).\n- CVE-2025-13946: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of\n  service (bsc#1254472).\n- CVE-2026-0959: denial of service via IEEE 802.11 protocol dissector crash (bsc#1256734).\n- CVE-2026-0960: denial of Service via HTTP3 protocol dissector infinite loop (bsc#1256736).\n- CVE-2026-0961: denial of Service vulnerability in BLF file parser (bsc#1256738).\n- CVE-2026-0962: denial of Service via SOME/IP-SD protocol dissector crash (bsc#1256739).\n- CVE-2026-3201: missing limit checks in USB HID protocol dissector's `parse_report_descriptor` function can lead to\n  memory exhaustion (bsc#1258907).\n- CVE-2026-3202: missing checks in NTS-KE protocol dissector can lead to crash (bsc#1258908).\n- CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory access and\n  crash (bsc#1258909).\n\nAlso libvirt was rebuilt against wireshark for the libvirt plugin.\n","status":"published","published":"2026-04-02T08:29:30Z","modified":"2026-04-03T07:45:38.640463Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:21559-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues\n\n- CVE-2026-3201: missing limit checks in USB HID protocol dissector's `parse_report_descriptor` function can lead to\n  memory exhaustion (bsc#1258907).\n- CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory access and\n  crash (bsc#1258909).\n- CVE-2026-5299: ICMPv6 dissector crash (bsc#1263757).\n- CVE-2026-5401: AFP dissector crash (bsc#1263756).\n- CVE-2026-5403: SBC audio codec crash (bsc#1263765).\n- CVE-2026-5404: K12 RF5 file parser crash (bsc#1263766).\n- CVE-2026-5405: RDP dissector crash (bsc#1263767).\n- CVE-2026-5406: FC-SWILS dissector crash (bsc#1263754).\n- CVE-2026-5407: SMB2 dissector infinite loop (bsc#1263753).\n- CVE-2026-5408: BT-DHT dissector crash (bsc#1263752).\n- CVE-2026-5409: Monero dissector crash (bsc#1263751).\n- CVE-2026-5653: DCP-ETSI dissector crash (bsc#1263750).\n- CVE-2026-5654: AMR-NB audio codec crash (bsc#1263749).\n- CVE-2026-5656: Profile import crash and possible code execution (bsc#1263809).\n- CVE-2026-5657: iLBC audio codec crash (bsc#1263747).\n- CVE-2026-6519: MBIM protocol dissector infinite loop (bsc#1263746).\n- CVE-2026-6520: OpenFlow v6 protocol dissector infinite loop (bsc#1263745).\n- CVE-2026-6521: OpenFlow v5 protocol dissector infinite loops (bsc#1263744).\n- CVE-2026-6522: RPKI-Router protocol dissector infinite loop (bsc#1263743).\n- CVE-2026-6523: GNW protocol dissector infinite loop (bsc#1263742).\n- CVE-2026-6524: MySQL protocol dissector crash (bsc#1263741).\n- CVE-2026-6527: ASN.1 PER dissector crash (bsc#1263739).\n- CVE-2026-6529: iLBC audio codec crash (bsc#1263737).\n- CVE-2026-6530: DCP-ETSI protocol dissector crash (bsc#1263736).\n- CVE-2026-6531: SANE protocol dissector infinite loop (bsc#1263735).\n- CVE-2026-6532: Kismet protocol dissector crash (bsc#1263734).\n- CVE-2026-6533: Dissection engine LZ77 decompression crash (bsc#1263733).\n- CVE-2026-6534: USB HID dissector infinite loop (bsc#1263732).\n- CVE-2026-6535: Dissection engine zlib decompression crash (bsc#1263731).\n- CVE-2026-6537: ZigBee dissector crash (bsc#1263729).\n- CVE-2026-6538: BEEP dissector crash (bsc#1263728).\n- CVE-2026-6868: HTTP protocol dissector crash (bsc#1263762).\n- CVE-2026-6869: WebSocket protocol dissector crash (bsc#1263726).\n\nChanges for wireshark:\n\n- Updated to 4.4.15\n","status":"published","published":"2026-05-06T00:10:40Z","modified":"2026-05-12T18:27:16.915912Z","updated_at":"2026-11-02T15:54:02.312556Z"}]}}