Description
Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
Published: 2026-07-08
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a heap‑based buffer overflow in Wireshark’s Catapult DCT2000 protocol dissector. The flaw allows a maliciously crafted packet to overflow a heap buffer, causing the application to crash and thereby denying service to users. It is classified as CWE‑122 and CWE‑476. The denial of service results from unexpected termination of the Wireshark process; it does not provide attackers with remote code execution.

Affected Systems

The affected Wireshark releases are 4.6.0 through 4.6.6 and 4.4.0 through 4.4.16. Any system running one of these builds is vulnerable.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity. The EPSS score of < 1% indicates a very low likelihood of exploitation, and the vulnerability is not listed in CISA KEV catalog. Based on the description, it is inferred that attackers would need to supply crafted DCT2000 packets to a Wireshark instance; the likely vector is by feeding traffic to Wireshark, which could be local or remote, so the likely attack path involves packet capture input.

Generated by OpenCVE AI on July 31, 2026 at 13:48 UTC.

Remediation

Vendor Solution

Upgrade to version 4.6.7 or above

OpenCVE Recommended Actions

  • Upgrade Wireshark to version 4.6.7 or newer to remove the buffer overflow flaw.
  • If an upgrade cannot be applied immediately, restrict Wireshark’s packet capture to trusted sources and consider disabling the DCT2000 dissector in the application settings to prevent processing of vulnerable packets.
  • Subscribe to Wireshark security advisories and implement future patch updates as they become available.

Generated by OpenCVE AI on July 31, 2026 at 13:48 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 09 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 09 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476
References
Metrics threat_severity

None

 threat_severity

Moderate

Wed, 08 Jul 2026 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Wireshark
Wireshark wireshark
Vendors & Products Wireshark
Wireshark wireshark

Wed, 08 Jul 2026 21:15:00 +0000

Type Values Removed Values Added
Description Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
Title Heap-based Buffer Overflow in Wireshark
Weaknesses CWE-122
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

Subscriptions

Wireshark Wireshark
cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published:

Updated: 2026-07-09T13:14:37.906Z

Reserved: 2026-07-08T20:46:08.884Z

Link: CVE-2026-15174

cve-icon Vulnrichment

Updated: 2026-07-09T13:14:29.875Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-08T21:16:48.310

Modified: 2026-07-09T19:21:52.893

Link: CVE-2026-15174

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-07-08T20:51:25Z

Links: CVE-2026-15174 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-07-31T14:00:07Z

Weaknesses