Critical Security Update for Wireshark: Denial of Service Vulnerabilities
Summary
ALSA-2026:84721: Important: wireshark security update. Affects wireshark versions < 1:4.4.2-10.el10_2.8. Fixed in 1:4.4.2-10.el10_2.8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is a widely used network protocol analyzer that allows users to capture and browse the traffic running on a computer network. It is essential for network troubleshooting, analysis, software and communications protocol development, and education. However, recent vulnerabilities have been identified that could lead to Denial of Service (DoS) attacks, affecting the reliability and availability of network services.
Vulnerability Detail
The vulnerabilities in Wireshark stem from various protocol dissectors that can be exploited to cause crashes or out-of-bounds writes. Specifically, issues have been identified in the C12.22, RRC, ESS, and X.509IF protocol dissectors, among others. These vulnerabilities can lead to Denial of Service, where the application becomes unresponsive or crashes, potentially disrupting network monitoring and analysis tasks.
How To Fix
Minimum fixed version
1:4.4.2-10.el10_2.8
This is the first release that contains the fix.
sudo dnf update wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the affected protocol dissectors until the package is updated. This may involve configuring Wireshark to ignore certain protocols or using alternative tools for network analysis.
Conclusion
The identified vulnerabilities in Wireshark present significant risks, particularly in terms of Denial of Service attacks. It is crucial for users to update their software to the latest patched version to mitigate these risks. Regular monitoring and updates are essential to maintaining network security.
See every vulnerability recorded for wireshark →
FAQ
A Denial of Service vulnerability allows an attacker to disrupt the normal functioning of a service, making it unavailable to users. In the context of Wireshark, this could mean the application crashes or becomes unresponsive.
You can check your version of Wireshark by running 'wireshark --version' in the terminal. If it is below 1:4.4.2-10.el10_2.8, it is recommended to update.
If you cannot update immediately, consider using alternative network analysis tools or avoid using the affected protocol dissectors until you can apply the update.
More information can be found on the CVE pages listed in the related section of the vulnerability advisory.
Vulert monitors and alerts for open-source vulnerabilities in software using a manifest file like package-lock.json. You can check if your application is affected by this vulnerability using the Vulert playground without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
