Critical Security Update for Wireshark: Addressing Multiple Denial of Service Vulnerabilities
Summary
ALSA-2026:83546: Important: wireshark security update. Affects wireshark versions < 1:3.4.10-9.el9_8.5. Fixed in 1:3.4.10-9.el9_8.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is a widely-used network protocol analyzer that allows users to capture and interactively browse the traffic running on a computer network. It supports hundreds of protocols and provides a robust platform for network troubleshooting, analysis, and development. However, recent vulnerabilities have been identified that could lead to Denial of Service (DoS) attacks, impacting the reliability and availability of network services.
Vulnerability Detail
The vulnerabilities in Wireshark stem from flaws in various protocol dissectors, including C12.22, RRC, ESS, H.245, and SPDY. These issues can lead to crashes or unexpected behavior when processing maliciously crafted packets, allowing attackers to exploit these weaknesses to cause Denial of Service. The vulnerabilities are tracked under CVE identifiers: CVE-2026-76880, CVE-2026-76886, CVE-2026-76919, CVE-2026-76927, and CVE-2026-95387.
How To Fix
Minimum fixed version
1:3.4.10-9.el9_8.5
This is the first release that contains the fix.
sudo dnf update wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can avoid processing untrusted or malformed packets that may exploit these vulnerabilities. Additionally, running Wireshark in a controlled environment or using a virtual machine can help mitigate risks until the update is applied.
Conclusion
The recent vulnerabilities in Wireshark pose significant risks, particularly in the form of Denial of Service attacks. Users are strongly encouraged to update to the latest patched version to ensure their systems remain secure and functional. Utilizing tools like Vulert can further enhance security by providing real-time vulnerability monitoring.
See every vulnerability recorded for wireshark →
FAQ
Wireshark is a network protocol analyzer that captures and displays data packets traveling over a network, allowing for detailed analysis and troubleshooting.
Denial of Service vulnerabilities allow attackers to disrupt the normal functioning of a service, making it unavailable to legitimate users.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
If an immediate update is not possible, avoid processing untrusted packets and consider using a virtual machine to run Wireshark safely.
For detailed information about the vulnerabilities, refer to the CVE pages associated with each CVE identifier mentioned in the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
