CVE Database›Document archive›CVE-2026-5409

CVE-2026-5409

wireshark: Wireshark: Denial of service via Monero protocol dissector crash

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · April 30, 2026

Updated · July 3, 2026

Description

A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the Monero protocol dissector, leading to a crash of the application. This could result in a denial of service (DoS) for users analyzing network traffic.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, users can disable the Monero protocol dissector in Wireshark. This prevents the vulnerable code from being executed when analyzing network traffic containing Monero protocol data.

To disable the dissector:

  1. Open Wireshark.
  2. Go to Analyze -> Enabled Protocols....
  3. In the Enabled Protocols dialog, uncheck the box next to Monero.
  4. Click OK.

Alternatively, users can avoid opening untrusted network trace files. Disabling the dissector may affect the ability to analyze legitimate Monero protocol traffic.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-825 · Expired Pointer Dereference