Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-08T20:50:45 wireshark: Wireshark: Denial of Service via TLS ECH decryptor crash 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CWE-617

TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service

A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause a denial of service by crafting a malicious TLS Encrypted Client Hello (ECH) packet. When Wireshark attempts to decrypt this malformed packet, it can lead to a crash of the application, making it unavailable.

Red Hat Enterprise Linux 10 Fix deferred wireshark Red Hat Enterprise Linux 6 Out of support scope wireshark Red Hat Enterprise Linux 7 Out of support scope wireshark Red Hat Enterprise Linux 8 Fix deferred wireshark Red Hat Enterprise Linux 9 Fix deferred wireshark https://www.cve.org/CVERecord?id=CVE-2026-15165 https://nvd.nist.gov/vuln/detail/CVE-2026-15165 https://gitlab.com/wireshark/wireshark/-/work_items/21390 https://www.wireshark.org/security/wnpa-sec-2026-56.html