CVE-2026-95388

A flaw was found in Wireshark. A heap-based buffer overflow in the sharkd utility can cause the application to crash, resulting in a Denial of Service (DoS). An attacker could exploit this vulnerability by convincing a user to process specially crafted input.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this flaw, restrict access to the sharkd daemon or remove the package if it is not required:

1. Terminate running sharkd processes if daemonized packet analysis is not required: killall sharkd

2. If sharkd must be run over a network socket, bind it only to localhost or restrict incoming network traffic to trusted hosts using firewall rules: firewall-cmd --remove-port=<port>/tcp --permanent firewall-cmd --reload

Warning: Reloading firewall rules may temporarily disrupt active network connections.

3. If Wireshark command-line utilities are not necessary, remove the package providing the tool: dnf remove wireshark-cli

Caveat: Removing wireshark-cli will remove related packet capture and dissection tools such as tshark.