Threats Tagged 'cve-2026-5405'

Multiple security vulnerabilities have been identified in the Wireshark packages distributed with Red Hat Enterprise Linux 10.0 Extended Update Support and related CodeReady Linux Builder variants. These include buffer over-read, improper memory allocation, heap-based buffer overflow, and path traversal issues. Red Hat has issued an important security update addressing these vulnerabilities in Wireshark version 4.4.2-3.el10_0.4. The update is available for various architectures including x86_64, s390x, ppc64le, and aarch64. No CVSS scores are provided, but the severity is rated as high by Red Hat Product Security. No known exploits in the wild have been reported. Users of affected Red Hat Enterprise Linux 10.0 Extended Update Support and CodeReady Linux Builder should apply the update as detailed in the Red Hat advisory.

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: Heap-based Buffer Overflow in Wireshark (CVE-2026-5405) * wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark (CVE-2026-5656) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution