Description
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Published: 2026-08-19
Score: 3.1 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is an expired pointer dereference in the Wireshark sharkd daemon. When triggered in versions 4.6.0 through 4.6.7 and 4.4.0 through 4.4.18, the bug causes the daemon to crash, resulting in a denial‑of‑service condition. The underlying weakness is a pointer misuse classified as CWE-248 and CWE-825.

Affected Systems

Wireshark Foundation’s Wireshark product is affected; users running any release from 4.4.0 to 4.4.18 or from 4.6.0 to 4.6.7 are vulnerable and should upgrade to 4.6.8 or later.

Risk and Exploitability

The CVSS score of 3.1 indicates low severity. The EPSS score is < 1%, which suggests a very low probability of exploitation in the wild. The vulnerability is not listed in CISA KEV. The likely attack vector is inferred to be either local or remote, where an attacker sends crafted traffic to the sharkd daemon. While the impact is modest, mitigating the vulnerability is advised.

Generated by OpenCVE AI on August 21, 2026 at 04:06 UTC.

Remediation

Vendor Solution

Upgrade to version 4.6.8 or above

OpenCVE Recommended Actions

  • Upgrade Wireshark to version 4.6.8 or newer, which includes the fix.
  • If an upgrade is not immediately possible, disable the sharkd service or configure it to listen only on localhost until the patch is applied.
  • Apply network segmentation or firewall rules to restrict traffic that can reach the sharkd interface, thereby reducing the exposure window.

Generated by OpenCVE AI on August 21, 2026 at 04:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6471-1 wireshark security update
History

Mon, 31 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

Fri, 21 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-248
References
Metrics threat_severity

None

 threat_severity

Low

Thu, 20 Aug 2026 01:00:00 +0000

Type Values Removed Values Added
First Time appeared Wireshark
Wireshark wireshark
Vendors & Products Wireshark
Wireshark wireshark

Wed, 19 Aug 2026 23:00:00 +0000

Type Values Removed Values Added
Description Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Title Expired Pointer Dereference in Wireshark
Weaknesses CWE-825
References
Metrics cvssV3_1

{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'}

Subscriptions

Wireshark Wireshark
cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published:

Updated: 2026-08-20T15:26:28.561Z

Reserved: 2026-08-19T22:35:19.932Z

Link: CVE-2026-76891

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-08-19T23:16:20.243

Modified: 2026-08-31T19:12:55.360

Link: CVE-2026-76891

cve-icon Redhat

Severity : Low

Publid Date: 2026-08-19T22:46:40Z

Links: CVE-2026-76891 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-21T04:15:04Z

Weaknesses