Description
SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
Published: 2026-07-08
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a NULL pointer dereference in the SSH protocol dissector within Wireshark. Exploiting the flaw causes the application to crash, leading to a denial‑of‑service condition. The flaw is categorized as CWE-476 and does not provide remote code execution, privilege escalation, or data disclosure.

Affected Systems

The flaw affects Wireshark versions 4.6.0 through 4.6.6 and 4.4.0 through 4.4.16. Versions newer than 4.6.7 contain the patch that eliminates the crash.

Risk and Exploitability

The public CVSS score is 5.5, placing the vulnerability at moderate severity. The EPSS score is < 1%, and the flaw is not listed in CISA's Known Exploited Vulnerabilities catalog. Based on the description, it is inferred that an attacker must provide a crafted SSH packet that Wireshark processes to trigger the crash. The vulnerability does not provide remote code execution or privilege escalation; the primary risk is a denial‑of‑service that may impact critical network‑monitoring services.

Generated by OpenCVE AI on July 29, 2026 at 13:19 UTC.

Remediation

Vendor Solution

Upgrade to version 4.6.7 or above

OpenCVE Recommended Actions

  • Upgrade Wireshark to version 4.6.7 or later.
  • Limit Wireshark’s exposure to untrusted traffic by applying capture filters or isolating the capture interface, and consider disabling the application when not in use.
  • Monitor Wireshark logs for unexpected termination, configure alert thresholds to detect possible exploitation.

Generated by OpenCVE AI on July 29, 2026 at 13:19 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 09 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 09 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-1286
References
Metrics threat_severity

None

 threat_severity

Moderate

Wed, 08 Jul 2026 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Wireshark
Wireshark wireshark
Vendors & Products Wireshark
Wireshark wireshark

Wed, 08 Jul 2026 21:15:00 +0000

Type Values Removed Values Added
Description SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
Title NULL Pointer Dereference in Wireshark
Weaknesses CWE-476
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

Subscriptions

Wireshark Wireshark
cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published:

Updated: 2026-07-09T13:44:55.663Z

Reserved: 2026-07-08T20:45:53.857Z

Link: CVE-2026-15171

cve-icon Vulnrichment

Updated: 2026-07-09T13:44:47.568Z

cve-icon NVD

No data.

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-07-08T20:51:10Z

Links: CVE-2026-15171 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-07-29T13:30:06Z

Weaknesses
  • CWE-1286

    Improper Validation of Syntactic Correctness of Input

  • CWE-476

    NULL Pointer Dereference