Input validation error in Wireshark - CVE-2026-0961

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU121529

Input validation error in Wireshark - CVE-2026-0961

Published: January 14, 2026 / Updated: February 12, 2026


Vulnerability identifier: #VU121529
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-0961
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in BLF file parser. A remote attacker can send specially crafted input via the network monitored with Wireshark and perform a denial of service (DoS) attack.


Affected software

Wireshark
Debian Linux
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Basesystem Module
Desktop Applications Module
Server Applications Module
openEuler
Anolis OS
wireshark
wireshark-cli
wireshark-devel
wireshark-doc
wireshark (Debian package)
wireshark-help
wireshark-debuginfo
wireshark-debugsource
libwireshark19-debuginfo
libwsutil17
wireshark-ui-qt
wireshark-ui-qt-debuginfo
libwireshark19
libwiretap16
libwiretap16-debuginfo
libwsutil17-debuginfo
libvirt-daemon-plugin-sanlock-debuginfo
libvirt-daemon-driver-storage-iscsi-debuginfo
libvirt-daemon-common
libvirt-daemon-driver-interface
libvirt-daemon-qemu
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-storage-scsi-debuginfo
libvirt-client-qemu
libvirt-daemon-driver-storage-logical-debuginfo
libvirt-daemon-driver-nodedev-debuginfo
libvirt-daemon-log
libvirt-daemon-driver-storage-disk
libvirt-daemon-plugin-lockd-debuginfo
libvirt-daemon-driver-interface-debuginfo
libvirt-daemon-config-network
libvirt-daemon-proxy-debuginfo
libvirt-daemon-driver-network
libvirt-daemon-hooks
libvirt-daemon-driver-libxl-debuginfo
libvirt-daemon-driver-storage
libvirt-daemon-common-debuginfo
libvirt-daemon-driver-qemu-debuginfo
libvirt-client-debuginfo
libvirt-daemon-plugin-sanlock
libvirt-daemon
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-storage-rbd-debuginfo
libvirt-doc
libvirt-daemon-driver-libxl
libvirt-daemon-xen
libvirt-daemon-driver-storage-iscsi-direct
libvirt-libs-debuginfo
libvirt-libs
libvirt-debugsource
libvirt-daemon-driver-storage-core
libvirt-daemon-config-nwfilter
libvirt-daemon-driver-nwfilter-debuginfo
libvirt-daemon-proxy
libvirt-daemon-lock-debuginfo
libvirt-daemon-driver-storage-mpath
libvirt-nss
libvirt-client
libvirt
libvirt-daemon-driver-secret-debuginfo
libvirt-daemon-driver-storage-core-debuginfo
libvirt-daemon-lock
libvirt-daemon-driver-network-debuginfo
libvirt-daemon-debuginfo
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-secret
libvirt-nss-debuginfo
libvirt-daemon-driver-qemu
libvirt-daemon-driver-storage-disk-debuginfo
libvirt-daemon-driver-storage-iscsi-direct-debuginfo
libvirt-daemon-plugin-lockd
libvirt-daemon-log-debuginfo
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-storage-scsi
libvirt-daemon-driver-storage-mpath-debuginfo
libvirt-devel

How to mitigate CVE-2026-0961

Install updates from vendor's website.

Wireshark - addressed in versions 4.4.13, 4.6.3
wireshark - update to 4.4.9-6
wireshark-cli - update to 4.4.9-6
wireshark-devel - update to 4.4.9-6
wireshark-doc - update to 4.4.9-6
wireshark (Debian package) - update to 4.4.13-0+deb13u1
wireshark-help - update to 4.4.14-1
wireshark-devel - update to 4.4.14-1
wireshark - update to 4.4.14-1
wireshark-debuginfo - update to 4.4.14-1
wireshark-debugsource - update to 4.4.14-1
wireshark-debuginfo - update to 4.6.4-150700.21.8.1
libwireshark19-debuginfo - update to 4.6.4-150700.21.8.1
libwsutil17 - update to 4.6.4-150700.21.8.1
wireshark-ui-qt - update to 4.6.4-150700.21.8.1
wireshark-ui-qt-debuginfo - update to 4.6.4-150700.21.8.1
wireshark-devel - update to 4.6.4-150700.21.8.1
libwireshark19 - update to 4.6.4-150700.21.8.1
libwiretap16 - update to 4.6.4-150700.21.8.1
wireshark - update to 4.6.4-150700.21.8.1
libwiretap16-debuginfo - update to 4.6.4-150700.21.8.1
wireshark-debugsource - update to 4.6.4-150700.21.8.1
libwsutil17-debuginfo - update to 4.6.4-150700.21.8.1
libvirt-daemon-plugin-sanlock-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-iscsi-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-common - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-interface - update to 11.0.0-150700.4.19.1
libvirt-daemon-qemu - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-iscsi - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-scsi-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-client-qemu - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-logical-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-nodedev-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-log - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-disk - update to 11.0.0-150700.4.19.1
libvirt-daemon-plugin-lockd-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-interface-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-config-network - update to 11.0.0-150700.4.19.1
libvirt-daemon-proxy-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-network - update to 11.0.0-150700.4.19.1
libvirt-daemon-hooks - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-libxl-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage - update to 11.0.0-150700.4.19.1
libvirt-daemon-common-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-qemu-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-client-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-plugin-sanlock - update to 11.0.0-150700.4.19.1
libvirt-daemon - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-rbd - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-rbd-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-doc - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-libxl - update to 11.0.0-150700.4.19.1
libvirt-daemon-xen - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-iscsi-direct - update to 11.0.0-150700.4.19.1
libvirt-libs-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-libs - update to 11.0.0-150700.4.19.1
libvirt-debugsource - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-core - update to 11.0.0-150700.4.19.1
libvirt-daemon-config-nwfilter - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-nwfilter-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-proxy - update to 11.0.0-150700.4.19.1
libvirt-daemon-lock-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-mpath - update to 11.0.0-150700.4.19.1
libvirt-nss - update to 11.0.0-150700.4.19.1
libvirt-client - update to 11.0.0-150700.4.19.1
libvirt - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-secret-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-core-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-lock - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-network-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-nodedev - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-secret - update to 11.0.0-150700.4.19.1
libvirt-nss-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-qemu - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-disk-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-iscsi-direct-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-plugin-lockd - update to 11.0.0-150700.4.19.1
libvirt-daemon-log-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-logical - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-nwfilter - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-scsi - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-mpath-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-devel - update to 11.0.0-150700.4.19.1

External References

Related Security Bulletins