Name: CVE-2026-0960: Loop with Unreachable Exit Condition
Creator: Rapid7
Published: 2026-01-14T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-0960, CVSS 4.7, EPSS 0.00147

HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service

CVSS Details

CVSS 3.1 Base Score: 4.7
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon_linux_2023	—	Upgrade wireshark-debugsourceUpgrade wireshark-cliUpgrade wireshark-cli-debuginfoUpgrade wireshark-devel	Mar 9, 2026	Jan 14, 2026
Debian	—	Upgrade wireshark	Feb 18, 2026	Feb 18, 2026
Redhat_linux	—	No solution exists	Jul 17, 2026	Jan 14, 2026
Suse	—	Upgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-xenUpgrade libwiretap16Upgrade wireshark-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade libwireshark17Upgrade libvirt-daemon-hooksUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-nssUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-clientUpgrade libvirt-daemon-driver-libxlUpgrade wiresharkUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libwsutil17Upgrade libvirt-daemonUpgrade libvirt-libsUpgrade libwsutil15Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade wireshark-ui-qtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-docUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirtUpgrade libwiretap14Upgrade libwireshark19Upgrade libvirt-develUpgrade libvirt-daemon-config-network	Jan 23, 2026	Jan 23, 2026
Wireshark	—	Upgrade to Wireshark version 4.6.3Upgrade to Wireshark version 4.4.13	Mar 18, 2026	Mar 18, 2026

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence