CVE-2026-15173
Wireshark: Wireshark: Denial of Service via pcapng file parser crash
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 9, 2026
Updated · July 9, 2026
Description
A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the pcapng file parser, leading to a crash of the application. This denial of service (DoS) could prevent legitimate users from accessing the service, impacting its availability.
Statement
This Moderate impact denial of service flaw in Wireshark's pcapng file parser can be triggered when processing a specially crafted capture file. An attacker could provide a malicious pcapng file, leading to an application crash and preventing legitimate network analysis. Exploitation requires user interaction, as the user must open the malicious file.
Mitigation
To mitigate this issue, users should avoid opening pcapng files from untrusted or unknown sources. Exercise caution when handling network capture files, especially those received unexpectedly or from external origins.
CVSS / CWE
CWE-825 · Expired Pointer Dereference