The pcapng file parser in Wireshark versions 4.6.0 to 4.6.6 contains a flaw that can be triggered to crash the application, leading to denial of service. The vulnerability is characterized by a CVSS 3.1 vector of AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H, indicating local attack vector, high complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, and high impact on availability. Multiple Ubuntu package versions of Wireshark are affected, spanning from older releases up to version 4.6.4-1. There is no indication of known exploits in the wild or cloud service involvement.

Exploitation of this vulnerability results in denial of service by crashing Wireshark when parsing crafted pcapng files. There is no impact on confidentiality or integrity. The attack requires local access, high complexity, and user interaction, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or official fixes are provided, users should monitor Ubuntu and Wireshark vendor advisories for updates. Until a fix is available, avoid opening untrusted pcapng files with affected Wireshark versions.