CVE Database›Document archive›CVE-2026-76890

CVE-2026-76890

wireshark: Wireshark: Denial of service in sharkd via expired pointer dereference

Loading…

Severity

Low

Red Hat Product Security

3.1

CVSS 3.1

Review impact separately from score.

Published · August 20, 2026

Updated · September 22, 2026

Description

A flaw was found in Wireshark's sharkd component. A remote attacker could exploit an expired pointer dereference, which leads to a crash in the sharkd service. This vulnerability could result in a denial of service (DoS) for affected systems, requiring user interaction to trigger the flaw.

Statement

This Low impact denial of service vulnerability in Wireshark's sharkd component requires high attack complexity and user interaction for successful exploitation. The limited exposure and specific conditions needed to trigger the flaw reduce its overall risk to Red Hat supported products.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this denial of service vulnerability, ensure the sharkd service is not running if its functionality is not required. If sharkd is necessary, restrict network access to trusted hosts using firewall rules to limit exposure. This may impact remote analysis capabilities if sharkd is actively used. A service restart or reload may be required for changes to take effect.

CVSS / CWE

CVSS 3.1 · 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-825 · Expired Pointer Dereference