BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade wireshark-cli-debuginfoUpgrade wireshark-cliUpgrade wireshark-debugsourceUpgrade wireshark-devel | Mar 9, 2026 | Jan 14, 2026 |
| Debian | — | Upgrade wireshark | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 14, 2026 |
| Suse | — | Upgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-xenUpgrade libwiretap15Upgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-nssUpgrade libvirt-daemonUpgrade libvirt-clientUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storageUpgrade wireshark-ui-qtUpgrade wiresharkUpgrade libvirt-develUpgrade libvirt-daemon-hooksUpgrade libvirt-client-qemuUpgrade wireshark-develUpgrade libvirt-daemon-logUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-proxyUpgrade libwsutil16Upgrade libvirt-daemon-driver-storage-scsiUpgrade libwireshark18Upgrade libvirt-daemon-config-nwfilterUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-daemon-commonUpgrade libwsutil17Upgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-mpathUpgrade libwiretap16Upgrade libwireshark19Upgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-core | Feb 4, 2026 | Feb 4, 2026 |
| Wireshark | — | Upgrade to Wireshark version 4.6.3Upgrade to Wireshark version 4.4.13 | Mar 18, 2026 | Mar 18, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub