Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-08T20:51:05 wireshark: Wireshark: Denial of Service via UMTS FP protocol dissector crash 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CWE-1286

UMTS FP protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

A flaw was found in Wireshark. This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted Universal Mobile Telecommunications System (UMTS) FP protocol packet. The flaw resides in the UMTS FP protocol dissector, which can lead to a crash of the Wireshark application. This can disrupt network analysis operations.

This Moderate impact denial of service flaw in Wireshark's UMTS FP protocol dissector can be triggered by processing a specially crafted packet. While exploitable by a remote attacker, successful exploitation requires a user to either open a malicious capture file or actively capture network traffic containing the crafted packet. This limits the attack surface to scenarios where Wireshark is actively used for network analysis. To mitigate this issue, users should avoid opening or analyzing untrusted network capture files with Wireshark. Additionally, consider running Wireshark in a sandboxed environment to limit the potential impact of a crash. If Wireshark is not essential for daily operations, removing the `wireshark` package can eliminate the vulnerability, though this may affect other tools dependent on its libraries. Red Hat Enterprise Linux 10 Fix deferred wireshark Red Hat Enterprise Linux 6 Out of support scope wireshark Red Hat Enterprise Linux 7 Out of support scope wireshark Red Hat Enterprise Linux 8 Fix deferred wireshark Red Hat Enterprise Linux 9 Fix deferred wireshark https://www.cve.org/CVERecord?id=CVE-2026-15169 https://nvd.nist.gov/vuln/detail/CVE-2026-15169 https://gitlab.com/wireshark/wireshark/-/work_items/21398 https://www.wireshark.org/security/wnpa-sec-2026-59.html