Description
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Published: 2026-08-19
Score: 3.1 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A memory management flaw in Wireshark's packet capture component, sharkd, causes the application to crash when processing certain traffic. The vulnerability is identified as a use‑after‑free error (CWE‑825) and results in a denial of service attack by terminating the Wireshark process.

Affected Systems

Wireshark Foundation Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 are affected. The issue does not apply to later releases such as 4.6.8 or higher.

Risk and Exploitability

The CVSS score of 3.1 indicates low severity. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog. Attackers would need to supply or influence traffic that is processed by sharkd, which may require local or remote network access depending on how the capture service is exposed. The exploit would trigger a crash, causing a denial of service for the user or system running Wireshark.

Generated by OpenCVE AI on August 20, 2026 at 08:12 UTC.

Remediation

Vendor Solution

Upgrade to version 4.6.8 or above

OpenCVE Recommended Actions

  • Upgrade Wireshark to version 4.6.8 or later to eliminate the crash condition.
  • Disable or restrict capture interfaces that handle untrusted network traffic to reduce exposure to the vulnerable code path.
  • Monitor system logs for unexpected Wireshark crashes.

Generated by OpenCVE AI on August 20, 2026 at 08:12 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6471-1 wireshark security update
History

Mon, 31 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

Thu, 20 Aug 2026 01:30:00 +0000

Type Values Removed Values Added
First Time appeared Wireshark
Wireshark wireshark
Vendors & Products Wireshark
Wireshark wireshark

Wed, 19 Aug 2026 23:00:00 +0000

Type Values Removed Values Added
Description Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Title Expired Pointer Dereference in Wireshark
Weaknesses CWE-825
References
Metrics cvssV3_1

{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'}

Subscriptions

Wireshark Wireshark
cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published:

Updated: 2026-08-20T15:26:28.706Z

Reserved: 2026-08-19T22:34:54.931Z

Link: CVE-2026-76890

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-08-19T23:16:20.107

Modified: 2026-08-31T19:12:38.427

Link: CVE-2026-76890

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-20T08:15:17Z

Weaknesses
  • CWE-825

    Expired Pointer Dereference