kritisch
CVE-2026-76886
wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.3CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Photon OS. Niedriger laut AlmaLinux (hoch), Amazon (hoch), Oracle (hoch), Rocky Linux (hoch), Red Hat (mittel).
Beschreibung
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 5.0 | wireshark, wireshark-devel | 4.6.8-1.ph5 |
| alma 10 | wireshark, wireshark-cli, wireshark-devel | 1:4.4.2-10.el10_2.8 |
| alma 8 | wireshark, wireshark-cli, wireshark-devel | 1:2.6.2-21.el8_10 |
| alma 9 | wireshark, wireshark-cli, wireshark-devel | 1:3.4.10-9.el9_8.5 |
| amazon linux 2 | wireshark, wireshark-cli, wireshark-debuginfo und 1 weitere | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2023 | wireshark-cli, wireshark-cli-debuginfo, wireshark-debugsource und 1 weitere | 1:4.6.8-1.amzn2023.0.1 |
| debian 11 | wireshark | kein Fix angegeben |
| debian 12 | wireshark | kein Fix angegeben |
| debian 13 | wireshark | 4.4.18-0+deb13u1 |
| debian 14 | wireshark | 4.6.9-1 |
| echo | wireshark | 4.4.18-0+deb13u1 |
| minimos | tshark-4.4 | 4.4.18-r0 |
Alle 73 Einträge aus 35 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 5.0 | wireshark | 4.6.8-1.ph5 |
| Photon OS 5.0 | wireshark-devel | 4.6.8-1.ph5 |
| alma 10 | wireshark | 1:4.4.2-10.el10_2.8 |
| alma 10 | wireshark-cli | 1:4.4.2-10.el10_2.8 |
| alma 10 | wireshark-devel | 1:4.4.2-10.el10_2.8 |
| alma 8 | wireshark | 1:2.6.2-21.el8_10 |
| alma 8 | wireshark-cli | 1:2.6.2-21.el8_10 |
| alma 8 | wireshark-devel | 1:2.6.2-21.el8_10 |
| alma 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| alma 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| alma 9 | wireshark-devel | 1:3.4.10-9.el9_8.5 |
| amazon linux 2 | wireshark | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2 | wireshark-cli | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2 | wireshark-debuginfo | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2 | wireshark-devel | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2023 | wireshark-cli | 1:4.6.8-1.amzn2023.0.1 |
| amazon linux 2023 | wireshark-cli-debuginfo | 1:4.6.8-1.amzn2023.0.1 |
| amazon linux 2023 | wireshark-debugsource | 1:4.6.8-1.amzn2023.0.1 |
| amazon linux 2023 | wireshark-devel | 1:4.6.8-1.amzn2023.0.1 |
| debian 11 | wireshark | kein Fix angegeben |
| debian 12 | wireshark | kein Fix angegeben |
| debian 13 | wireshark | 4.4.18-0+deb13u1 |
| debian 14 | wireshark | 4.6.9-1 |
| echo | wireshark | 4.4.18-0+deb13u1 |
| minimos | tshark-4.4 | 4.4.18-r0 |
| Oracle Linux 8 | wireshark | 1:2.6.2-21.el8_10 |
| Oracle Linux 8 | wireshark-cli | 1:2.6.2-21.el8_10 |
| Oracle Linux 8 | wireshark-devel | 1:2.6.2-21.el8_10 |
| Oracle Linux 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| Oracle Linux 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| Oracle Linux 9 | wireshark-devel | 1:3.4.10-9.el9_8.5 |
| rapidfort alma 10 | wireshark | 1:4.4.2-10.el10_2.8 |
| rapidfort alma 10 | wireshark-cli | 1:4.4.2-10.el10_2.8 |
| rapidfort alma 10 | wireshark-devel | 1:4.4.2-10.el10_2.8 |
| rapidfort alma 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| rapidfort alma 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| rapidfort alpine 3.20 | wireshark | 4.6.8-r0 |
| rapidfort alpine 3.21 | wireshark | 4.6.8-r0 |
| rapidfort alpine 3.22 | wireshark | 4.6.8-r0 |
| rapidfort alpine 3.23 | wireshark | 4.6.8-r0 |
| rapidfort alpine 3.24 | wireshark | 4.6.8-r0 |
| rapidfort amazon linux 2023 | wireshark-cli | 1:4.6.8-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | wireshark-devel | 1:4.6.8-1.amzn2023.0.1 |
| rapidfort debian 12 | rf-wireshark | 0:4.4.18-0+deb13u1, 0:4.6.9-1 |
| rapidfort debian 12 | wireshark | 0:4.4.18-0+deb13u1, 0:4.6.9-1 |
| rapidfort debian 13 | rf-wireshark | 0:4.4.18-0+deb13u1, 0:4.6.9-1 |
| rapidfort debian 13 | wireshark | 0:4.4.18-0+deb13u1, 0:4.6.9-1 |
| rapidfort fedora 43 | wireshark | 1:4.6.8-1.fc43 |
| rapidfort fedora 43 | wireshark-cli | 1:4.6.8-1.fc43 |
| rapidfort fedora 43 | wireshark-devel | 1:4.6.8-1.fc43 |
| rapidfort Oracle Linux 10 | wireshark | 1:4.4.2-10.0.1.el10_2.8 |
| rapidfort Oracle Linux 10 | wireshark-cli | 1:4.4.2-10.0.1.el10_2.8 |
| rapidfort Oracle Linux 10 | wireshark-devel | 1:4.4.2-10.0.1.el10_2.8 |
| rapidfort Oracle Linux 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| rapidfort Oracle Linux 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| rapidfort Oracle Linux 9 | wireshark-devel | 1:3.4.10-9.el9_8.5 |
| rapidfort rocky 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| rapidfort rocky 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| rapidfort ubuntu 20.04 | rf-wireshark | kein Fix angegeben |
| rapidfort ubuntu 20.04 | wireshark | kein Fix angegeben |
| rapidfort ubuntu 22.04 | rf-wireshark | kein Fix angegeben |
| rapidfort ubuntu 22.04 | wireshark | kein Fix angegeben |
| rapidfort ubuntu 24.04 | rf-wireshark | kein Fix angegeben |
| rapidfort ubuntu 24.04 | wireshark | kein Fix angegeben |
| Red Hat | wireshark | kein Fix angegeben |
| Red Hat | wireshark-devel | kein Fix angegeben |
| Red Hat | wireshark-gnome | kein Fix angegeben |
| rocky 10 | wireshark | 1:4.4.2-10.el10_2.8 |
| rocky 10 | wireshark-cli | 1:4.4.2-10.el10_2.8 |
| rocky 8 | wireshark | 1:2.6.2-21.el8_10 |
| rocky 8 | wireshark-cli | 1:2.6.2-21.el8_10 |
| rocky 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| rocky 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
Referenzen
- https://access.redhat.com/errata/RHSA-2026:83546
- https://access.redhat.com/security/cve/CVE-2026-76886
- https://bugzilla.redhat.com/2520079
- https://bugzilla.redhat.com/2520088
- https://bugzilla.redhat.com/2520093
- https://bugzilla.redhat.com/2520103
- https://bugzilla.redhat.com/2543033
- https://bugzilla.redhat.com/show_bug.cgi?id=2520079
Alle 27 Referenzen
- https://bugzilla.redhat.com/show_bug.cgi?id=2520088
- https://bugzilla.redhat.com/show_bug.cgi?id=2520093
- https://bugzilla.redhat.com/show_bug.cgi?id=2520103
- https://bugzilla.redhat.com/show_bug.cgi?id=2543033
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76880
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76886
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76919
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76927
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-95387
- https://errata.almalinux.org/9/ALSA-2026-83546.html
- https://errata.rockylinux.org/RLSA-2026:83546
- https://gitlab.com/wireshark/wireshark/-/work_items/21439
- https://gitlab.com/wireshark/wireshark/-/work_items/21446
- https://linux.oracle.com/cve/CVE-2026-76886.html
- https://linux.oracle.com/errata/ELSA-2026-84721.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-76886
- https://www.cve.org/CVERecord?id=CVE-2026-76886
- https://www.wireshark.org/security/wnpa-sec-2026-75.html