CVE-2026-76879
wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 20, 2026
Updated · October 19, 2026
Description
A flaw in Wireshark's C12.22 protocol dissector allows remote attackers to trigger a Denial of Service (DoS). By sending a specially crafted network packet or capture file, an attacker can crash the application, disrupting network analysis capabilities.
Statement
A denial of service flaw in Wireshark's C12.22 protocol dissector allows a remote attacker to crash the application via a crafted network packet, disrupting network analysis operations without requiring user interaction or privileges. RHEL 9 and older versions are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Avoid analyzing capture files or live traffic from untrusted sources. If ANSI C12.22 parsing is not required, disable the dissector by unchecking C1222 under Analyze > Enabled Protocols in Wireshark, or by executing tshark with the -d c1222,0 flag.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-617 · Reachable Assertion