Multiple vulnerabilities in Wireshark

Description

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in Wireshark dissector can be exploited remotely to cause denial of service.
2. Denial of service vulnerability in ciscodump allows denial of service can be exploited remotely to cause denial of service.
3. Denial of service vulnerability dissector can be exploited remotely to cause denial of service.
4. Denial of service vulnerability in allows denial of service can be exploited remotely to cause denial of service.
5. Information disclosure vulnerability allows possible information disclosure can be exploited to obtain sensitive information.

Original advisories

• wnpa-sec-2026-63 – Ciscodump extcap crash

• wnpa-sec-2026-61 – Multiple protocol dissector infinite loops
• wnpa-sec-2026-62 – DBS Etherwatch file parser crash
• wnpa-sec-2026-52 – Catapult DCT2000 protocol dissector crash
• wnpa-sec-2026-54 – FMP/NOTIFY protocol dissector large loop
• wnpa-sec-2026-55 – SSH protocol dissector crash
• wnpa-sec-2026-57 – IEEE 802.11 protocol dissector crash
• wnpa-sec-2026-58 – Z39.50 protocol dissector crash
• wnpa-sec-2026-59 – UMTS FP protocol dissector crash
• wnpa-sec-2026-60 – BLF file Parser information disclosure

Exploitation

Public exploits exist for this vulnerability.

CVE list

• CVE-2026-15163
  critical
• CVE-2026-15164
  high
• CVE-2026-15166
  high
• CVE-2026-15167
  high
• CVE-2026-15169
  critical
• CVE-2026-15170
  high
• CVE-2026-15171
  high
• CVE-2026-15172
  high
• CVE-2026-15174
  high
• CVE-2026-15168
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com