CVE-2026-5409
wireshark: Wireshark: Denial of service via Monero protocol dissector crash
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 30, 2026
Updated · July 3, 2026
Description
A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the Monero protocol dissector, leading to a crash of the application. This could result in a denial of service (DoS) for users analyzing network traffic.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, users can disable the Monero protocol dissector in Wireshark. This prevents the vulnerable code from being executed when analyzing network traffic containing Monero protocol data.
To disable the dissector:
- Open Wireshark.
- Go to
Analyze->Enabled Protocols.... - In the
Enabled Protocolsdialog, uncheck the box next toMonero. - Click
OK.
Alternatively, users can avoid opening untrusted network trace files. Disabling the dissector may affect the ability to analyze legitimate Monero protocol traffic.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-825 · Expired Pointer Dereference