Threats Tagged 'cve-2026-3201'

Multiple security vulnerabilities have been identified in the Wireshark packages distributed with Red Hat Enterprise Linux 10.0 Extended Update Support and related CodeReady Linux Builder variants. These include buffer over-read, improper memory allocation, heap-based buffer overflow, and path traversal issues. Red Hat has issued an important security update addressing these vulnerabilities in Wireshark version 4.4.2-3.el10_0.4. The update is available for various architectures including x86_64, s390x, ppc64le, and aarch64. No CVSS scores are provided, but the severity is rated as high by Red Hat Product Security. No known exploits in the wild have been reported. Users of affected Red Hat Enterprise Linux 10.0 Extended Update Support and CodeReady Linux Builder should apply the update as detailed in the Red Hat advisory.

Two security vulnerabilities have been identified in the Wireshark packages included with Red Hat Enterprise Linux 10 and related distributions. These include a buffer over-read (CVE-2026-3203) and an improperly controlled sequential memory allocation (CVE-2026-3201). Both issues have been addressed in updated Wireshark packages provided by Red Hat. The security impact is rated as moderate by Red Hat Product Security. Users of affected Red Hat Enterprise Linux 10 and CodeReady Linux Builder 10 versions should apply the available updates to mitigate these vulnerabilities.

USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve#cve-2026-3201#cwe-1325