Multiple vulnerabilities in Wireshark

説明

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. Heap overflow vulnerability in TLS protocol dissector can be exploited to cause denial of service or execute arbitrary code.
2. A denial of service vulnerability in SDP protocol dissector can be exploited to cause a denial of service.
3. Infinite loop vulnerability in DLMS/COSEM protocol dissector can be exploited to cause a denial of service.
4. Infinite loop vulnerability in TLS protocol dissector can be exploited to cause a denial of service.
5. A denial of service vulnerability in RTSP protocol dissector can be exploited to cause a denial of service.
6. A denial of service vulnerability in IEEE 802.11 protocol dissector can be exploited to cause a denial of service.

オリジナルアドバイザリー

• wnpa-sec-2026-14 · TLS dissector crash and possible code execution

• wnpa-sec-2026-19 · SDP dissector crash
• wnpa-sec-2026-25 · DLMS/COSEM dissector infinite loop
• wnpa-sec-2026-33 · TLS protocol dissector infinite loop
• wnpa-sec-2026-35 · RTSP protocol dissector crash
• wnpa-sec-2026-36 · IEEE 802.11 protocol dissector crash

エクスプロイテーション

Public exploits exist for this vulnerability.

関連製品

• Wireshark

CVEリスト

• CVE-2026-5402
  critical
• CVE-2026-5655
  critical
• CVE-2026-6526
  high
• CVE-2026-6528
  high
• CVE-2026-6536
  high
• CVE-2026-6525
  high

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com