CVE Database›Document archive›CVE-2026-76926

CVE-2026-76926

wireshark: Wireshark: Denial of service via reachable assertion in BUSMASTER file parser

Loading…

Severity

Low

Red Hat Product Security

3.1

CVSS 3.1

Review impact separately from score.

Published · August 20, 2026

Updated · September 22, 2026

Description

A flaw was found in Wireshark. A remote attacker could exploit this by providing a specially crafted BUSMASTER file, which triggers a reachable assertion in the BUSMASTER file parser, leading to an abnormal exit. This could result in a denial of service (DoS), making the application unavailable.

Statement

This Low impact denial of service flaw in Wireshark's BUSMASTER file parser requires user interaction to open a specially crafted file. The high attack complexity further reduces the risk, as successful exploitation would only lead to a temporary disruption of the application.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, users should avoid opening untrusted or specially crafted BUSMASTER files with Wireshark. Exercise caution when handling files from unknown or suspicious sources.

CVSS / CWE

CVSS 3.1 · 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-617 · Reachable Assertion