wireshark security update
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. Security Fix(es): SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-95387) Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-95388) SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-95389) MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-95392) CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-95393) Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-95394) IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-95395) Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-96415) IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-96416) RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service(CVE-2026-96417) TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and
OESA-2026-4228
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:OESA-2026-4228
wireshark
Source reference: /affected/0/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 4.4.19-1.oe2403sp1
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.4.19-1.oe2403sp1"
}
]
}
],
"package": {
"name": "wireshark",
"purl": "pkg:rpm/openEuler/wireshark&distro=openEuler-24.03-LTS-SP1",
"ecosystem": "openEuler:24.03-LTS-SP1"
},
"database_specific": {
"source": "https://repo.openeuler.org/security/data/osv/OESA-2026-4228.json"
},
"ecosystem_specific": {
"src": [
"wireshark-4.4.19-1.oe2403sp1.src.rpm"
],
"noarch": [
"wireshark-help-4.4.19-1.oe2403sp1.noarch.rpm"
],
"x86_64": [
"wireshark-4.4.19-1.oe2403sp1.x86_64.rpm",
"wireshark-debuginfo-4.4.19-1.oe2403sp1.x86_64.rpm",
"wireshark-debugsource-4.4.19-1.oe2403sp1.x86_64.rpm",
"wireshark-devel-4.4.19-1.oe2403sp1.x86_64.rpm"
],
"aarch64": [
"wireshark-4.4.19-1.oe2403sp1.aarch64.rpm",
"wireshark-debuginfo-4.4.19-1.oe2403sp1.aarch64.rpm",
"wireshark-debugsource-4.4.19-1.oe2403sp1.aarch64.rpm",
"wireshark-devel-4.4.19-1.oe2403sp1.aarch64.rpm"
]
}
}
]Publisher severity
medium
Source reference: /database_specific/severity
- Event
- #52150 · Revision 1
- Added to Heist Feed
- Publisher date