Critical Denial of Service Vulnerabilities in Wireshark Package
Summary
RLSA-2026:83546: Important: wireshark security update. Affects wireshark versions < 1:3.4.10-9.el9_8.5. Fixed in 1:3.4.10-9.el9_8.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is a widely-used network protocol analyzer that enables users to capture and interactively browse the traffic running on a computer network. It is essential for network troubleshooting, analysis, software and communications protocol development, and education. However, recent vulnerabilities have been identified that can lead to Denial of Service (DoS) attacks, affecting the stability and reliability of the application.
Vulnerability Detail
The vulnerabilities in Wireshark stem from various protocol dissectors that can be exploited to cause a Denial of Service. Specifically, the C12.22, RRC, ESS, H.245, and SPDY protocol dissectors have been found to contain flaws that allow for crashes or out-of-bounds writes. These vulnerabilities can be triggered by specially crafted packets, leading to application crashes and potential service interruptions. The CVSS score for these vulnerabilities is 8.1, indicating a high severity level.
How To Fix
Minimum fixed version
1:3.4.10-9.el9_8.5
This is the first release that contains the fix.
sudo dnf update wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid processing packets from untrusted sources or disable specific protocol dissectors that are known to be vulnerable until the update can be applied.
Conclusion
The identified vulnerabilities in the Wireshark package pose significant risks, including potential Denial of Service attacks. It is crucial for users to update to the latest patched version to mitigate these risks and ensure the stability of their network analysis tools.
See every vulnerability recorded for wireshark →
FAQ
A Denial of Service (DoS) vulnerability allows an attacker to disrupt the normal functioning of a service, making it unavailable to users.
You can check your version of Wireshark by running 'wireshark --version' in your terminal. If it is below 1:3.4.10-9.el9_8.5, it is affected.
If you cannot update immediately, avoid using Wireshark with untrusted network traffic and consider disabling vulnerable protocol dissectors.
More information can be found on the CVE pages linked in the security advisory or by visiting the official Wireshark website.
Vulert monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json, providing real-time insights without requiring code access.
References
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
