7.0
High
CVE-2026-5656 Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code…
Description
Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wireshark 4.6 | 4.6.0 → < 4.6.5 | 4.6.5 |
| Wireshark 4.4 | 4.4.0 → < 4.4.15 | 4.4.15 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions not published | |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Versions not published | |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 10.0 Extended Update Support | Versions not published |
References
- www.wireshark.org www.wireshark.org
- GitLab Issue #21115 gitlab.com
Timeline
- Published
- Last modified
Other CVEs of Wireshark
The 185 CVEs of Wireshark →
CVE-2026-95391
ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium
CVE-2026-95389
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
8.1
High
CVE-2026-95386
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium
CVE-2026-95390
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium