Threats affecting pkg:deb/ubuntu/wireshark

A denial of service vulnerability (CVE-2026-76887) exists in the Wireshark dissection engine affecting versions 4.4.0 to 4.4.18 and 4.6.0 to 4.6.7. The vulnerability causes the application to crash when processing certain inputs, leading to service disruption. It is classified as medium severity with a CVSS score of 6.5. No known exploits are reported in the wild. The vulnerability is related to a memory issue (CWE-122).

CVE-2026-15168 is a vulnerability in the BLF file parser of Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6, affecting multiple Ubuntu package versions. It requires local access with high attack complexity and user interaction. The vulnerability may lead to limited information disclosure without impacting integrity or availability.

Multiple vulnerabilities in Wireshark, including crashes, infinite loops, memory leaks, and potential information disclosure, have been addressed in version 4.4.17. These issues affect various protocol dissectors and utilities such as SMB2, UDS, ROHC, IEEE 802.11, and SSH. The vulnerabilities impact numerous specific versions of Wireshark and related libraries. The update was released by the SUSE Product Security Team to fix denial of service and information disclosure risks.

CVE-2026-15164 is a denial of service vulnerability in the ciscodump dissector of Wireshark affecting multiple Ubuntu package versions from 1.10.2-1 through 4.6.4-1. The vulnerability causes Wireshark to crash when processing certain inputs, leading to denial of service. No known exploits have been reported in the wild. The affected versions span several Ubuntu LTS releases.

CVE-2026-15165 is a vulnerability in Wireshark versions 4.6.0 through 4.6.6 that causes a crash in the TLS ECH decryptor, resulting in a denial of service condition. This flaw allows an attacker to disrupt Wireshark's normal operation by triggering the crash. Multiple Ubuntu package versions of Wireshark are affected. There are no known exploits in the wild at this time.

CVE-2026-15166 is a vulnerability in the IEEE 802.11 protocol dissector of Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6 that can cause the application to crash, leading to a denial of service. Exploitation requires local access with low privileges and user interaction. Multiple Ubuntu package versions of Wireshark are affected. No public exploit or patch information is currently available.

CVE-2026-15167 is a denial of service vulnerability in Wireshark's DBS Etherwatch file parser affecting versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16. The flaw can cause Wireshark to crash when processing specially crafted files. This vulnerability has been assigned a medium severity level based on its impact. No public exploit code or exploitation in the wild has been reported. The affected versions listed include specific Ubuntu package builds. No patch or remediation information is provided in the available data.

CVE-2026-15169 is a vulnerability in Wireshark's UMTS FP protocol dissector affecting versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16. It can cause the application to crash, resulting in a denial of service condition. The vulnerability has medium severity and no known exploits in the wild. No patch or remediation information is provided in the available data.

A vulnerability in the Z39.50 protocol dissector of Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6 can cause the application to crash, resulting in a denial of service condition. This affects specific Ubuntu package versions of Wireshark. The vulnerability leads to application instability but no confirmed exploitation in the wild is reported.

CVE-2026-15171 is a vulnerability in Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6 that causes the SSH protocol dissector to crash, resulting in a denial of service. The vulnerability affects multiple Ubuntu package versions of Wireshark. Exploitation requires user interaction and local system access. There are no known exploits reported in the wild.

CVE-2026-15172 is a vulnerability in the FMP/NOTIFY protocol dissector of Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6 that can cause the application to crash, resulting in a denial of service condition.

CVE-2026-15173 is a denial of service vulnerability in Wireshark versions 4.6.0 through 4.6.6 caused by a crash in the pcapng file parser. It affects multiple Ubuntu package versions of Wireshark. The vulnerability requires local access, high attack complexity, and user interaction. It does not impact confidentiality or integrity but disrupts availability.

A vulnerability in the Catapult DCT2000 protocol dissector in Wireshark versions 4.4.0 to 4.4.16 and 4.6.0 to 4.6.6 can cause the application to crash, resulting in a denial of service. This affects multiple Ubuntu package versions of Wireshark. The vulnerability requires local access and user interaction to trigger.

VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file