Denial of Service Vulnerability in Wireshark by Riverbed Technology
CVE-2026-6523

5.5MEDIUM

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
30 April 2026

What is CVE-2026-6523?

A vulnerability in the GNW protocol dissector of Wireshark versions 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 can lead to an infinite loop, resulting in a denial of service. Maliciously crafted packets can exploit this flaw, causing Wireshark to become unresponsive or crash, thereby interrupting normal operations and potentially leading to data loss or system interruptions during network analysis.

Affected Version(s)

Wireshark 4.6.0 < 4.6.5

Wireshark 4.4.0 < 4.4.15

References

https://www.wireshark.org/security/wnpa-sec-2026-38.html
https://gitlab.com/wireshark/wireshark/-/work_items/21177

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sharon Brizinov
.