vulnerability

Oracle Linux: CVE-2025-9817: ELSA-2026-1714: wireshark security update (MODERATE)

Severity
5
CVSS
(AV:L/AC:M/Au:N/C:N/I:N/A:C)
Published
Sep 3, 2025
Added
Feb 3, 2026
Modified
Feb 3, 2026

Description

A flaw was found in Wireshark’s SSH dissector, caused by a missing NULL check in key exchange parameter handling. This vulnerability can trigger a segmentation fault when processing malformed SSH traffic or crafted capture files, potentially causing the application to crash and resulting in a denial of service.

Solutions

oracle-linux-upgrade-wiresharkoracle-linux-upgrade-wireshark-clioracle-linux-upgrade-wireshark-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.