crítica
CVE-2026-76886
wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.3CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Photon OS. Más baja según AlmaLinux (alta), Amazon (alta), Oracle (alta), Rocky Linux (alta), Red Hat (media).
Descripción
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| Photon OS 5.0 | wireshark, wireshark-devel | 4.6.8-1.ph5 |
| alma 10 | wireshark, wireshark-cli, wireshark-devel | 1:4.4.2-10.el10_2.8 |
| alma 8 | wireshark, wireshark-cli, wireshark-devel | 1:2.6.2-21.el8_10 |
| alma 9 | wireshark, wireshark-cli, wireshark-devel | 1:3.4.10-9.el9_8.5 |
| amazon linux 2 | wireshark, wireshark-cli, wireshark-debuginfo y 1 más | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2023 | wireshark-cli, wireshark-cli-debuginfo, wireshark-debugsource y 1 más | 1:4.6.8-1.amzn2023.0.1 |
| debian 11 | wireshark | sin corrección indicada |
| debian 12 | wireshark | sin corrección indicada |
| debian 13 | wireshark | 4.4.18-0+deb13u1 |
| debian 14 | wireshark | 4.6.9-1 |
| echo | wireshark | 4.4.18-0+deb13u1 |
| minimos | tshark-4.4 | 4.4.18-r0 |
Mostrar las 73 entradas de 35 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| Photon OS 5.0 | wireshark | 4.6.8-1.ph5 |
| Photon OS 5.0 | wireshark-devel | 4.6.8-1.ph5 |
| alma 10 | wireshark | 1:4.4.2-10.el10_2.8 |
| alma 10 | wireshark-cli | 1:4.4.2-10.el10_2.8 |
| alma 10 | wireshark-devel | 1:4.4.2-10.el10_2.8 |
| alma 8 | wireshark | 1:2.6.2-21.el8_10 |
| alma 8 | wireshark-cli | 1:2.6.2-21.el8_10 |
| alma 8 | wireshark-devel | 1:2.6.2-21.el8_10 |
| alma 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| alma 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| alma 9 | wireshark-devel | 1:3.4.10-9.el9_8.5 |
| amazon linux 2 | wireshark | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2 | wireshark-cli | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2 | wireshark-debuginfo | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2 | wireshark-devel | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2023 | wireshark-cli | 1:4.6.8-1.amzn2023.0.1 |
| amazon linux 2023 | wireshark-cli-debuginfo | 1:4.6.8-1.amzn2023.0.1 |
| amazon linux 2023 | wireshark-debugsource | 1:4.6.8-1.amzn2023.0.1 |
| amazon linux 2023 | wireshark-devel | 1:4.6.8-1.amzn2023.0.1 |
| debian 11 | wireshark | sin corrección indicada |
| debian 12 | wireshark | sin corrección indicada |
| debian 13 | wireshark | 4.4.18-0+deb13u1 |
| debian 14 | wireshark | 4.6.9-1 |
| echo | wireshark | 4.4.18-0+deb13u1 |
| minimos | tshark-4.4 | 4.4.18-r0 |
| Oracle Linux 8 | wireshark | 1:2.6.2-21.el8_10 |
| Oracle Linux 8 | wireshark-cli | 1:2.6.2-21.el8_10 |
| Oracle Linux 8 | wireshark-devel | 1:2.6.2-21.el8_10 |
| Oracle Linux 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| Oracle Linux 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| Oracle Linux 9 | wireshark-devel | 1:3.4.10-9.el9_8.5 |
| rapidfort alma 10 | wireshark | 1:4.4.2-10.el10_2.8 |
| rapidfort alma 10 | wireshark-cli | 1:4.4.2-10.el10_2.8 |
| rapidfort alma 10 | wireshark-devel | 1:4.4.2-10.el10_2.8 |
| rapidfort alma 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| rapidfort alma 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| rapidfort alpine 3.20 | wireshark | 4.6.8-r0 |
| rapidfort alpine 3.21 | wireshark | 4.6.8-r0 |
| rapidfort alpine 3.22 | wireshark | 4.6.8-r0 |
| rapidfort alpine 3.23 | wireshark | 4.6.8-r0 |
| rapidfort alpine 3.24 | wireshark | 4.6.8-r0 |
| rapidfort amazon linux 2023 | wireshark-cli | 1:4.6.8-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | wireshark-devel | 1:4.6.8-1.amzn2023.0.1 |
| rapidfort debian 12 | rf-wireshark | 0:4.4.18-0+deb13u1, 0:4.6.9-1 |
| rapidfort debian 12 | wireshark | 0:4.4.18-0+deb13u1, 0:4.6.9-1 |
| rapidfort debian 13 | rf-wireshark | 0:4.4.18-0+deb13u1, 0:4.6.9-1 |
| rapidfort debian 13 | wireshark | 0:4.4.18-0+deb13u1, 0:4.6.9-1 |
| rapidfort fedora 43 | wireshark | 1:4.6.8-1.fc43 |
| rapidfort fedora 43 | wireshark-cli | 1:4.6.8-1.fc43 |
| rapidfort fedora 43 | wireshark-devel | 1:4.6.8-1.fc43 |
| rapidfort Oracle Linux 10 | wireshark | 1:4.4.2-10.0.1.el10_2.8 |
| rapidfort Oracle Linux 10 | wireshark-cli | 1:4.4.2-10.0.1.el10_2.8 |
| rapidfort Oracle Linux 10 | wireshark-devel | 1:4.4.2-10.0.1.el10_2.8 |
| rapidfort Oracle Linux 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| rapidfort Oracle Linux 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| rapidfort Oracle Linux 9 | wireshark-devel | 1:3.4.10-9.el9_8.5 |
| rapidfort rocky 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| rapidfort rocky 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| rapidfort ubuntu 20.04 | rf-wireshark | sin corrección indicada |
| rapidfort ubuntu 20.04 | wireshark | sin corrección indicada |
| rapidfort ubuntu 22.04 | rf-wireshark | sin corrección indicada |
| rapidfort ubuntu 22.04 | wireshark | sin corrección indicada |
| rapidfort ubuntu 24.04 | rf-wireshark | sin corrección indicada |
| rapidfort ubuntu 24.04 | wireshark | sin corrección indicada |
| Red Hat | wireshark | sin corrección indicada |
| Red Hat | wireshark-devel | sin corrección indicada |
| Red Hat | wireshark-gnome | sin corrección indicada |
| rocky 10 | wireshark | 1:4.4.2-10.el10_2.8 |
| rocky 10 | wireshark-cli | 1:4.4.2-10.el10_2.8 |
| rocky 8 | wireshark | 1:2.6.2-21.el8_10 |
| rocky 8 | wireshark-cli | 1:2.6.2-21.el8_10 |
| rocky 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| rocky 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
Referencias
- https://access.redhat.com/errata/RHSA-2026:83546
- https://access.redhat.com/security/cve/CVE-2026-76886
- https://bugzilla.redhat.com/2520079
- https://bugzilla.redhat.com/2520088
- https://bugzilla.redhat.com/2520093
- https://bugzilla.redhat.com/2520103
- https://bugzilla.redhat.com/2543033
- https://bugzilla.redhat.com/show_bug.cgi?id=2520079
Las 27 referencias
- https://bugzilla.redhat.com/show_bug.cgi?id=2520088
- https://bugzilla.redhat.com/show_bug.cgi?id=2520093
- https://bugzilla.redhat.com/show_bug.cgi?id=2520103
- https://bugzilla.redhat.com/show_bug.cgi?id=2543033
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76880
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76886
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76919
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76927
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-95387
- https://errata.almalinux.org/9/ALSA-2026-83546.html
- https://errata.rockylinux.org/RLSA-2026:83546
- https://gitlab.com/wireshark/wireshark/-/work_items/21439
- https://gitlab.com/wireshark/wireshark/-/work_items/21446
- https://linux.oracle.com/cve/CVE-2026-76886.html
- https://linux.oracle.com/errata/ELSA-2026-84721.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-76886
- https://www.cve.org/CVERecord?id=CVE-2026-76886
- https://www.wireshark.org/security/wnpa-sec-2026-75.html