Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-08T20:51:20 wireshark: Wireshark: Denial of service via FMP/NOTIFY protocol dissector crash 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CWE-1286

FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

A flaw was found in Wireshark. A local user could exploit this vulnerability by processing a specially crafted FMP/NOTIFY protocol packet. This could lead to a denial of service (DoS) due to a crash in the protocol dissector, making the application unavailable.

This Moderate impact flaw in Wireshark allows a local attacker to cause a denial of service by processing a specially crafted FMP/NOTIFY protocol packet. The vulnerability requires user interaction, as an attacker must trick a local user into opening a malicious packet capture file, limiting the attack surface. To mitigate this issue, users should avoid opening untrusted or suspicious packet capture files with Wireshark. Restricting access to systems running Wireshark and ensuring that only trusted network captures are analyzed can further reduce the risk of exploitation. Red Hat Enterprise Linux 10 Fix deferred wireshark Red Hat Enterprise Linux 6 Out of support scope wireshark Red Hat Enterprise Linux 7 Out of support scope wireshark Red Hat Enterprise Linux 8 Fix deferred wireshark Red Hat Enterprise Linux 9 Fix deferred wireshark https://www.cve.org/CVERecord?id=CVE-2026-15172 https://nvd.nist.gov/vuln/detail/CVE-2026-15172 https://gitlab.com/wireshark/wireshark/-/work_items/21347 https://www.wireshark.org/security/wnpa-sec-2026-54.html