Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-08T20:51:10 wireshark: Wireshark: Denial of service via SSH protocol dissector crash 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CWE-1286

SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

A flaw was found in Wireshark's SSH (Secure Shell) protocol dissector. A remote attacker could craft a malicious network capture file that, when opened by a user, would cause the Wireshark application to crash. This vulnerability leads to a denial of service, preventing the user from analyzing network traffic.

Moderate: A denial of service flaw exists in Wireshark's SSH protocol dissector, where processing a specially crafted network capture file can lead to application termination. This issue requires user interaction to open a malicious file, limiting its impact to the availability of the Wireshark application for network traffic analysis. Users should avoid opening untrusted or suspicious network capture files with Wireshark. Running Wireshark in a sandboxed environment can further limit the impact of potential crashes. No direct configuration options are available to prevent this flaw without affecting Wireshark's core functionality. Red Hat Enterprise Linux 10 Fix deferred wireshark Red Hat Enterprise Linux 6 Out of support scope wireshark Red Hat Enterprise Linux 7 Out of support scope wireshark Red Hat Enterprise Linux 8 Fix deferred wireshark Red Hat Enterprise Linux 9 Fix deferred wireshark https://www.cve.org/CVERecord?id=CVE-2026-15171 https://nvd.nist.gov/vuln/detail/CVE-2026-15171 https://gitlab.com/wireshark/wireshark/-/work_items/21378 https://www.wireshark.org/security/wnpa-sec-2026-55.html