{"id":"CVE-2026-76887","aliases":["AZL-96794","DEBIAN-CVE-2026-76887","EUVD-2026-63143","GHSA-8wh7-4hr7-v35q","OESA-2026-3584","SUSE-SU-2026:24013-1","SUSE-SU-2026:4379-1","UBUNTU-CVE-2026-76887","openSUSE-SU-2026:11579-1","openSUSE-SU-2026:22014-1"],"status":"published","title":"Heap-based Buffer Overflow in Wireshark","description":"Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00176,"percentile":0.07095,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2026-08-19T22:35:29Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["4.4.18-0+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["4.6.9-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.4.7-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.10-1","4.0.11-1","4.0.11-1~deb12u1","4.0.17-0+deb12u1","4.0.17-0+deb12u2","4.0.17-0+deb12u3","4.0.3-1","4.0.5-1~exp1","4.0.6-1","4.0.6-1~deb12u1","4.0.6-1~exp1","4.0.7-1","4.0.8-1","4.2.0-1","4.2.0-1~exp0","4.2.0~rc3-1~exp1","4.2.2-1","4.2.2-1.1","4.2.2-1.1~exp1","4.2.4-1","4.2.5-1","4.2.5-2","4.2.6-1","4.4.0-0exp1","4.4.0-0exp2","4.4.0-1","4.4.1-1","4.4.2-1","4.4.3-1","4.4.4-1","4.4.5-1","4.4.6-1","4.4.6-2","4.4.7-0exp1","4.4.7-1","4.4.8-0exp1","4.4.9-1","4.6.0-0exp1","4.6.0-1","4.6.0~rc1-0exp1","4.6.0~rc1-0exp2","4.6.1-1","4.6.1-2","4.6.2-1","4.6.2-3","4.6.3-1","4.6.4-1","4.6.5-1","4.6.6-1","4.6.6-2","4.6.9-1"]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.18-0+deb13u1"}]}],"versions":["4.4.13-0+deb13u1","4.4.14-0+deb13u1","4.4.15-0+deb13u1","4.4.16-0+deb13u1","4.4.7-1","4.4.8-0exp1","4.4.9-1"]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.9-1"}]}],"versions":["4.4.7-1","4.4.8-0exp1","4.4.9-1","4.6.0-0exp1","4.6.0-1","4.6.0~rc1-0exp1","4.6.0~rc1-0exp2","4.6.1-1","4.6.1-2","4.6.2-1","4.6.2-3","4.6.3-1","4.6.4-1","4.6.5-1","4.6.6-1","4.6.6-2"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.18-1.oe2403sp1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.18-160000.1.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.18-160000.1.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.8-150700.21.14.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.8-150700.21.14.1"}]}],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.2-1","1.10.3-1","1.10.5-1ubuntu1","1.10.5-2","1.10.6-1","1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1","2.6.3-1~ubuntu14.04.1","2.6.4-2~ubuntu14.04.1","2.6.5-1~ubuntu14.04.1","2.6.6-1~ubuntu14.04.0","2.6.8-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm2","2.6.10-1~ubuntu14.04.0~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.7+g7fc8978-1","1.12.8+g5b6e543-2","2.0.1+g59ea380-3build1","2.0.2+ga16e22e-1","2.2.6+g32dac6a-2ubuntu0.16.04","2.6.3-1~ubuntu16.04.1","2.6.4-2~ubuntu16.04.0","2.6.5-1~ubuntu16.04.0","2.6.6-1~ubuntu16.04.0","2.6.8-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0+esm1","2.6.10-1~ubuntu16.04.0+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1","2.6.3-1~ubuntu18.04.1","2.6.4-2~ubuntu18.04.0","2.6.5-1~ubuntu18.04.0","2.6.6-1~ubuntu18.04.0","2.6.8-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0+esm1","2.6.10-1~ubuntu18.04.0+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.5-1","3.0.7-1","3.2.1-1","3.2.2-1","3.2.3-1","3.2.3-1ubuntu0.1~esm1","3.2.3-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4.7-1~exp1","3.4.9-1","3.6.2-1ubuntu1","3.6.2-2","3.6.2-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.8-1","4.0.10-1","4.0.11-1","4.2.0-1","4.2.2-1","4.2.2-1.1build1","4.2.2-1.1build2","4.2.2-1.1build3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.6.4-1","4.6.6-1","4.6.6-2","4.6.6-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.7-1","4.6.0-1","4.6.1-2","4.6.2-3","4.6.3-1","4.6.4-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.8-2.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.18-160000.1.1"}]}],"bundled":28}],"products":[{"vendor":"wireshark","product":"wireshark"},{"vendor":"wireshark foundation","product":"wireshark"}],"references":[{"url":"https://www.wireshark.org/security/wnpa-sec-2026-69.html","tags":["Vendor Advisory","web","report"]},{"url":"https://gitlab.com/wireshark/wireshark/-/work_items/21423","tags":["Mitigation","Vendor Advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76887","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-8wh7-4hr7-v35q"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/76xxx/CVE-2026-76887.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-76887","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76880","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76882","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76885","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76886","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76891","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76917","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76918","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76919","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76924","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76926","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76927","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76928","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76929","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624013-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1275279","tags":["report"]},{"url":"https://bugzilla.suse.com/1275280","tags":["report"]},{"url":"https://bugzilla.suse.com/1275281","tags":["report"]},{"url":"https://bugzilla.suse.com/1275828","tags":["report"]},{"url":"https://bugzilla.suse.com/1275829","tags":["report"]},{"url":"https://bugzilla.suse.com/1275831","tags":["report"]},{"url":"https://bugzilla.suse.com/1275832","tags":["report"]},{"url":"https://bugzilla.suse.com/1275833","tags":["report"]},{"url":"https://bugzilla.suse.com/1275834","tags":["report"]},{"url":"https://bugzilla.suse.com/1275835","tags":["report"]},{"url":"https://bugzilla.suse.com/1275836","tags":["report"]},{"url":"https://bugzilla.suse.com/1275838","tags":["report"]},{"url":"https://bugzilla.suse.com/1275839","tags":["report"]},{"url":"https://bugzilla.suse.com/1275840","tags":["report"]},{"url":"https://bugzilla.suse.com/1275841","tags":["report"]},{"url":"https://bugzilla.suse.com/1275842","tags":["report"]},{"url":"https://bugzilla.suse.com/1275843","tags":["report"]},{"url":"https://bugzilla.suse.com/1275844","tags":["report"]},{"url":"https://bugzilla.suse.com/1275845","tags":["report"]},{"url":"https://bugzilla.suse.com/1275846","tags":["report"]},{"url":"https://bugzilla.suse.com/1275847","tags":["report"]},{"url":"https://bugzilla.suse.com/1275848","tags":["report"]},{"url":"https://bugzilla.suse.com/1275849","tags":["report"]},{"url":"https://bugzilla.suse.com/1275850","tags":["report"]},{"url":"https://bugzilla.suse.com/1275851","tags":["report"]},{"url":"https://bugzilla.suse.com/1275852","tags":["report"]},{"url":"https://bugzilla.suse.com/1275853","tags":["report"]},{"url":"https://bugzilla.suse.com/1275854","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76929","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264379-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-76887","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-76887","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-76887","title":"Heap-based Buffer Overflow in Wireshark","description":"Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service","status":"published","published":"2026-08-19T22:35:29.925Z","modified":"2026-09-17T18:46:16.633Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T13:46:32.755125Z"}],"euvd":[{"id":"EUVD-2026-63143","description":"Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service","status":"published","published":"2026-08-19T22:35:29Z","modified":"2026-09-17T18:46:16Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T17:28:10.38936Z"}],"ghsa":[{"id":"GHSA-8wh7-4hr7-v35q","title":"Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of...","description":"Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service","status":"published","published":"2026-08-20T00:35:09Z","modified":"2026-08-20T00:35:17Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:10:45.95343Z"}],"nvd":[{"id":"CVE-2026-76887","description":"Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service","status":"published","published":"2026-08-19T23:16:19.677Z","modified":"2026-08-31T19:15:38.533Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:12:40.302911Z"}],"osv":[{"id":"CVE-2026-76887","title":"Heap-based Buffer Overflow in Wireshark","description":"Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service","status":"published","published":"2026-08-19T22:35:29.925Z","modified":"2026-10-28T02:30:59.402808964Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:45:17.102988Z"},{"id":"DEBIAN-CVE-2026-76887","description":"Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service","status":"published","published":"2026-08-19T23:16:19.677Z","modified":"2026-10-14T06:00:21.648514972Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:46:03.502256Z"},{"id":"OESA-2026-3584","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources.  It supports dozens of protocol capture file formats and understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nC12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76879)\n\nRRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76880)\n\nCMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76881)\n\nBluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76882)\n\nCatapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76883)\n\nERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76884)\n\nTektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76885)\n\nC12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76886)\n\nCrash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76887)\n\nRDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76888)\n\nUMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76889)\n\nCrash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76890)\n\nCrash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76891)\n\nBluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76917)\n\nSSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76918)\n\nESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76919)\n\n3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76920)\n\nCMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76921)\n\nBluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76922)\n\nBluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76923)\n\nKerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76924)\n\nBUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76926)\n\nH.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76927)\n\nX.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76928)\n\nPcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-76929)","status":"published","published":"2026-08-30T04:18:48Z","modified":"2026-08-30T04:32:43.366638548Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"UBUNTU-CVE-2026-76887","description":"Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service","status":"published","published":"2026-08-19T23:16:00Z","modified":"2026-10-17T13:01:06.412151951Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:57:13.483205Z"},{"id":"AZL-96794","title":"CVE-2026-76887 affecting package wireshark 4.4.7-2","description":"Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service","status":"published","published":"2026-08-19T23:16:19Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:26.280152Z"},{"id":"openSUSE-SU-2026:11579-1","title":"libwireshark19-4.6.8-2.1 on GA media","description":"These are all security issues fixed in the libwireshark19-4.6.8-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-22T00:00:00Z","modified":"2026-08-23T11:15:04.071748272Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:22014-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nUpdate to Wireshark 4.4.18:\n\n- CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).\n- CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).\n- CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).\n- CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).\n- CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).\n- CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).\n- CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).\n- CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).\n- CVE-2026-76884: ERF file parser crash (bsc#1275834).\n- CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).\n- CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).\n- CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).\n- CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).\n- CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).\n- CVE-2026-76890: Sharkd utility crash (bsc#1275841).\n- CVE-2026-76891: Sharkd utility crash (bsc#1275844).\n- CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).\n- CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).\n- CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).\n- CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).\n- CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).\n- CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).\n- CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).\n- CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).\n- CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).\n- CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).\n- CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).\n- CVE-2026-76929: Pcapng file parser crash (bsc#1275854).\n\nMany more features, bug fixes and updated protocol support as listed in:\n https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html\n","status":"published","published":"2026-10-02T17:37:57Z","modified":"2026-10-03T17:00:03.78842142Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:24013-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nUpdate to Wireshark 4.4.18:\n\n- CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).\n- CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).\n- CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).\n- CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).\n- CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).\n- CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).\n- CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).\n- CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).\n- CVE-2026-76884: ERF file parser crash (bsc#1275834).\n- CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).\n- CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).\n- CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).\n- CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).\n- CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).\n- CVE-2026-76890: Sharkd utility crash (bsc#1275841).\n- CVE-2026-76891: Sharkd utility crash (bsc#1275844).\n- CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).\n- CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).\n- CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).\n- CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).\n- CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).\n- CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).\n- CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).\n- CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).\n- CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).\n- CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).\n- CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).\n- CVE-2026-76929: Pcapng file parser crash (bsc#1275854).\n\nMany more features, bug fixes and updated protocol support as listed in:\n https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html\n","status":"published","published":"2026-10-02T16:41:07Z","modified":"2026-10-09T17:23:09.157248881Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4379-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nUpdate to Wireshark 4.6.8:\n\n- CVE-2026-19694: TTX Logger file parser crash (bsc#1275279).\n- CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280).\n- CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281).\n- CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828).\n- CVE-2026-76880: RRC protocol dissector crash (bsc#1275829).\n- CVE-2026-76881: CMS protocol dissector crash (bsc#1275831).\n- CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832).\n- CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833).\n- CVE-2026-76884: ERF file parser crash (bsc#1275834).\n- CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835).\n- CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836).\n- CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838).\n- CVE-2026-76888: RDP protocol dissector crash (bsc#1275839).\n- CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840).\n- CVE-2026-76890: Sharkd utility crash (bsc#1275841).\n- CVE-2026-76891: Sharkd utility crash (bsc#1275844).\n- CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842).\n- CVE-2026-76918: SSH protocol dissector crash (bsc#1275843).\n- CVE-2026-76919: ESS protocol dissector crash (bsc#1275845).\n- CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846).\n- CVE-2026-76921: CMS protocol dissector crash (bsc#1275847).\n- CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848).\n- CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849).\n- CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850).\n- CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851).\n- CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852).\n- CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853).\n- CVE-2026-76929: Pcapng file parser crash (bsc#1275854).\n\nMany more features, bug fixes and updated protocol support as listed in:\n https://www.wireshark.org/docs/relnotes/wireshark-4.6.8.html\n","status":"published","published":"2026-09-28T15:17:52Z","modified":"2026-09-29T09:15:11.191421646Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}