pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service

A flaw was found in Wireshark. A remote attacker could exploit a vulnerability in the pcapng file parser, leading to a crash of the application. This denial of service (DoS) could prevent legitimate users from accessing the service, impacting its availability.

This Moderate impact denial of service flaw in Wireshark's pcapng file parser can be triggered when processing a specially crafted capture file. An attacker could provide a malicious pcapng file, leading to an application crash and preventing legitimate network analysis. Exploitation requires user interaction, as the user must open the malicious file. To mitigate this issue, users should avoid opening pcapng files from untrusted or unknown sources. Exercise caution when handling network capture files, especially those received unexpectedly or from external origins. Red Hat Enterprise Linux 10 Fix deferred wireshark Red Hat Enterprise Linux 6 Out of support scope wireshark Red Hat Enterprise Linux 7 Out of support scope wireshark Red Hat Enterprise Linux 8 Fix deferred wireshark Red Hat Enterprise Linux 9 Fix deferred wireshark https://www.cve.org/CVERecord?id=CVE-2026-15173 https://nvd.nist.gov/vuln/detail/CVE-2026-15173 https://gitlab.com/wireshark/wireshark/-/work_items/21285 https://www.wireshark.org/security/wnpa-sec-2026-53.html