critique
CVE-2026-76886
wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.3CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Le label propre à Trivy est CRITICAL. Critique selon NVD, Photon OS. Plus basse selon AlmaLinux (élevée), Amazon (élevée), Oracle (élevée), Rocky Linux (élevée), Red Hat (moyenne).
Description
C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| Photon OS 5.0 | wireshark, wireshark-devel | 4.6.8-1.ph5 |
| alma 10 | wireshark, wireshark-cli, wireshark-devel | 1:4.4.2-10.el10_2.8 |
| alma 8 | wireshark, wireshark-cli, wireshark-devel | 1:2.6.2-21.el8_10 |
| alma 9 | wireshark, wireshark-cli, wireshark-devel | 1:3.4.10-9.el9_8.5 |
| amazon linux 2 | wireshark, wireshark-cli, wireshark-debuginfo et 1 autres | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2023 | wireshark-cli, wireshark-cli-debuginfo, wireshark-debugsource et 1 autres | 1:4.6.8-1.amzn2023.0.1 |
| debian 11 | wireshark | pas de correctif indiqué |
| debian 12 | wireshark | pas de correctif indiqué |
| debian 13 | wireshark | 4.4.18-0+deb13u1 |
| debian 14 | wireshark | 4.6.9-1 |
| echo | wireshark | 4.4.18-0+deb13u1 |
| minimos | tshark-4.4 | 4.4.18-r0 |
Afficher les 73 entrées de 35 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| Photon OS 5.0 | wireshark | 4.6.8-1.ph5 |
| Photon OS 5.0 | wireshark-devel | 4.6.8-1.ph5 |
| alma 10 | wireshark | 1:4.4.2-10.el10_2.8 |
| alma 10 | wireshark-cli | 1:4.4.2-10.el10_2.8 |
| alma 10 | wireshark-devel | 1:4.4.2-10.el10_2.8 |
| alma 8 | wireshark | 1:2.6.2-21.el8_10 |
| alma 8 | wireshark-cli | 1:2.6.2-21.el8_10 |
| alma 8 | wireshark-devel | 1:2.6.2-21.el8_10 |
| alma 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| alma 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| alma 9 | wireshark-devel | 1:3.4.10-9.el9_8.5 |
| amazon linux 2 | wireshark | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2 | wireshark-cli | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2 | wireshark-debuginfo | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2 | wireshark-devel | 1:2.6.2-15.amzn2.0.11 |
| amazon linux 2023 | wireshark-cli | 1:4.6.8-1.amzn2023.0.1 |
| amazon linux 2023 | wireshark-cli-debuginfo | 1:4.6.8-1.amzn2023.0.1 |
| amazon linux 2023 | wireshark-debugsource | 1:4.6.8-1.amzn2023.0.1 |
| amazon linux 2023 | wireshark-devel | 1:4.6.8-1.amzn2023.0.1 |
| debian 11 | wireshark | pas de correctif indiqué |
| debian 12 | wireshark | pas de correctif indiqué |
| debian 13 | wireshark | 4.4.18-0+deb13u1 |
| debian 14 | wireshark | 4.6.9-1 |
| echo | wireshark | 4.4.18-0+deb13u1 |
| minimos | tshark-4.4 | 4.4.18-r0 |
| Oracle Linux 8 | wireshark | 1:2.6.2-21.el8_10 |
| Oracle Linux 8 | wireshark-cli | 1:2.6.2-21.el8_10 |
| Oracle Linux 8 | wireshark-devel | 1:2.6.2-21.el8_10 |
| Oracle Linux 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| Oracle Linux 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| Oracle Linux 9 | wireshark-devel | 1:3.4.10-9.el9_8.5 |
| rapidfort alma 10 | wireshark | 1:4.4.2-10.el10_2.8 |
| rapidfort alma 10 | wireshark-cli | 1:4.4.2-10.el10_2.8 |
| rapidfort alma 10 | wireshark-devel | 1:4.4.2-10.el10_2.8 |
| rapidfort alma 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| rapidfort alma 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| rapidfort alpine 3.20 | wireshark | 4.6.8-r0 |
| rapidfort alpine 3.21 | wireshark | 4.6.8-r0 |
| rapidfort alpine 3.22 | wireshark | 4.6.8-r0 |
| rapidfort alpine 3.23 | wireshark | 4.6.8-r0 |
| rapidfort alpine 3.24 | wireshark | 4.6.8-r0 |
| rapidfort amazon linux 2023 | wireshark-cli | 1:4.6.8-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | wireshark-devel | 1:4.6.8-1.amzn2023.0.1 |
| rapidfort debian 12 | rf-wireshark | 0:4.4.18-0+deb13u1, 0:4.6.9-1 |
| rapidfort debian 12 | wireshark | 0:4.4.18-0+deb13u1, 0:4.6.9-1 |
| rapidfort debian 13 | rf-wireshark | 0:4.4.18-0+deb13u1, 0:4.6.9-1 |
| rapidfort debian 13 | wireshark | 0:4.4.18-0+deb13u1, 0:4.6.9-1 |
| rapidfort fedora 43 | wireshark | 1:4.6.8-1.fc43 |
| rapidfort fedora 43 | wireshark-cli | 1:4.6.8-1.fc43 |
| rapidfort fedora 43 | wireshark-devel | 1:4.6.8-1.fc43 |
| rapidfort Oracle Linux 10 | wireshark | 1:4.4.2-10.0.1.el10_2.8 |
| rapidfort Oracle Linux 10 | wireshark-cli | 1:4.4.2-10.0.1.el10_2.8 |
| rapidfort Oracle Linux 10 | wireshark-devel | 1:4.4.2-10.0.1.el10_2.8 |
| rapidfort Oracle Linux 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| rapidfort Oracle Linux 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| rapidfort Oracle Linux 9 | wireshark-devel | 1:3.4.10-9.el9_8.5 |
| rapidfort rocky 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| rapidfort rocky 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
| rapidfort ubuntu 20.04 | rf-wireshark | pas de correctif indiqué |
| rapidfort ubuntu 20.04 | wireshark | pas de correctif indiqué |
| rapidfort ubuntu 22.04 | rf-wireshark | pas de correctif indiqué |
| rapidfort ubuntu 22.04 | wireshark | pas de correctif indiqué |
| rapidfort ubuntu 24.04 | rf-wireshark | pas de correctif indiqué |
| rapidfort ubuntu 24.04 | wireshark | pas de correctif indiqué |
| Red Hat | wireshark | pas de correctif indiqué |
| Red Hat | wireshark-devel | pas de correctif indiqué |
| Red Hat | wireshark-gnome | pas de correctif indiqué |
| rocky 10 | wireshark | 1:4.4.2-10.el10_2.8 |
| rocky 10 | wireshark-cli | 1:4.4.2-10.el10_2.8 |
| rocky 8 | wireshark | 1:2.6.2-21.el8_10 |
| rocky 8 | wireshark-cli | 1:2.6.2-21.el8_10 |
| rocky 9 | wireshark | 1:3.4.10-9.el9_8.5 |
| rocky 9 | wireshark-cli | 1:3.4.10-9.el9_8.5 |
Références
- https://access.redhat.com/errata/RHSA-2026:83546
- https://access.redhat.com/security/cve/CVE-2026-76886
- https://bugzilla.redhat.com/2520079
- https://bugzilla.redhat.com/2520088
- https://bugzilla.redhat.com/2520093
- https://bugzilla.redhat.com/2520103
- https://bugzilla.redhat.com/2543033
- https://bugzilla.redhat.com/show_bug.cgi?id=2520079
Les 27 références
- https://bugzilla.redhat.com/show_bug.cgi?id=2520088
- https://bugzilla.redhat.com/show_bug.cgi?id=2520093
- https://bugzilla.redhat.com/show_bug.cgi?id=2520103
- https://bugzilla.redhat.com/show_bug.cgi?id=2543033
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76880
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76886
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76919
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76927
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-95387
- https://errata.almalinux.org/9/ALSA-2026-83546.html
- https://errata.rockylinux.org/RLSA-2026:83546
- https://gitlab.com/wireshark/wireshark/-/work_items/21439
- https://gitlab.com/wireshark/wireshark/-/work_items/21446
- https://linux.oracle.com/cve/CVE-2026-76886.html
- https://linux.oracle.com/errata/ELSA-2026-84721.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-76886
- https://www.cve.org/CVERecord?id=CVE-2026-76886
- https://www.wireshark.org/security/wnpa-sec-2026-75.html