CVE Database›CVE-2026-15173

CVE-2026-15173

Wireshark: Wireshark: Denial of Service via pcapng file parser crash

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 9, 2026

Updated · July 9, 2026

Description

A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the pcapng file parser, leading to a crash of the application. This denial of service (DoS) could prevent legitimate users from accessing the service, impacting its availability.

Statement

This Moderate impact denial of service flaw in Wireshark's pcapng file parser can be triggered when processing a specially crafted capture file. An attacker could provide a malicious pcapng file, leading to an application crash and preventing legitimate network analysis. Exploitation requires user interaction, as the user must open the malicious file.

Mitigation

To mitigate this issue, users should avoid opening pcapng files from untrusted or unknown sources. Exercise caution when handling network capture files, especially those received unexpectedly or from external origins.

CVSS / CWE

CWE-825 · Expired Pointer Dereference