CVE-2026-116744

The ntop nDPI software (versions through 6.0 ) is vulnerable to an out-of-bounds read within the dissect_softether_host_fqdn() function in softether.c. The root cause is the use of consumed byte count instead of data length when comparing host_name. A remote attacker can exploit this by sending c...

CVE-2026-116744 ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

CVE-2026-116744 ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector

ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissectsoftetherhostfqdn in softether.c that compares hostname using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-classified SoftEther flows, causing strncmp t...

mtproto-dissector

Telegram Protocol Dissector This is a Wireshark dissector that helps you understand the Telegram traffic around you. It dissects the Telegram packets it sees according to the MTProto 2.0 Protocol. Features Supported transport protocols: Abridged, Full, Intermediate, HTTP Supports de-obfuscation...

Amazon Linux 2 : wireshark (ALAS-2026-4006)

The version of wireshark installed on the remote host is prior to 2.6.2-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4006 advisory. SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-95389 Heap buffer...

Rocky Linux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel (ALMALINUX9.6:CLSA-2026:1792635672)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792635672 advisory. - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76886 Note that Nessus has not...

AlmaLinux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel (ALMALINUX9.6:CLSA-2026:1792635672)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792635672 advisory. - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76886 Note that Nessus has not test...

CLSA-2026-1786718192 wireshark: Fix of 2 CVEs

CVE-2023-5371: RTPS dissector: reject offset additions that move the offset backwards to prevent an excessive dissection loop...

Rocky Linux 10.2 [CIQ] Security Update: wireshark / wireshark-cli / wireshark-cli-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_84721)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202684721 advisory. wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...

wireshark security update

An update is available for wireshark. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The wireshark packages contain a network protocol analyzer used to capture...

Wireshark 1.6.x < 1.6.2 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.2 advisory. - The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark...

wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write

A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause a denial of service DoS by sending a specially crafted Universal Mobile Telecommunications System UMTS RRC protocol packet. The flaw resides in the UMTS RRC protocol dissector, which can lead to a crash of the...

wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash

A flaw was found in Wireshark. An unauthenticated remote attacker could exploit a vulnerability in the C12.22 protocol dissector by sending specially crafted network traffic. This could lead to a crash of the application, resulting in a Denial of Service DoS...

wireshark: Wireshark: Denial of Service via X.509IF protocol dissector crash

A flaw in Wireshark's X.509IF protocol dissector allows a remote attacker to cause a Denial of Service DoS. By providing a specially crafted capture file or network stream, an attacker can crash the application, making it unavailable...

wireshark: Heap-based Buffer Overflow in Wireshark

A flaw was found in the SCTP protocol dissector in Wireshark. This issue occurs when malformed packets are decoded from a pcap file or the network, causing a heap-based buffer overflow, resulting in a denial of service or potentially allowing code execution...

wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash

A flaw in Wireshark's C12.22 protocol dissector allows remote attackers to trigger a Denial of Service DoS. By sending a specially crafted network packet or capture file, an attacker can crash the application, disrupting network analysis capabilities...

wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector

A flaw was found in Wireshark. The SPDY protocol dissector suffers from a heap-based buffer overflow due to improper handling of packet data. A remote attacker could exploit this vulnerability by injecting crafted network packets or enticing a user to inspect a malicious capture file, causing the...

wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector

A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the H.245 protocol dissector. By crafting and sending malformed H.245 protocol data, an attacker could cause the Wireshark application to crash when a user processes this untrusted network data, leading to a denial ...

wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector

A flaw was found in Wireshark. A remote attacker could exploit a denial of service vulnerability in the ESS protocol dissector by processing a specially crafted network packet. This could lead to the application crashing, preventing network traffic analysis. The impact is limited to the...

MiracleLinux 8 : wireshark-2.6.2-21.el8_10 (AXSA:2026-2083:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2083:01 advisory. wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...