Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-08T20:51:25 wireshark: Wireshark: Denial of Service via Catapult DCT2000 protocol dissector crash 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CWE-476

Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

A flaw was found in Wireshark. A local attacker could exploit a crash in the Catapult DCT2000 protocol dissector. This vulnerability, requiring user interaction, leads to a denial of service, making the system unavailable.

Moderate: A denial of service vulnerability exists in Wireshark due to a crash in the Catapult DCT2000 protocol dissector. This flaw requires local user interaction, as an attacker must provide a specially crafted capture file for a user to open. The impact is limited to the availability of the Wireshark application, making the system unavailable only in the context of network traffic analysis. To reduce the risk, avoid opening untrusted network capture files that may contain malicious Catapult DCT2000 protocol data. Ensure that Wireshark is used only with data from trusted sources to prevent potential application crashes. Red Hat Enterprise Linux 10 Fix deferred wireshark Red Hat Enterprise Linux 6 Out of support scope wireshark Red Hat Enterprise Linux 7 Out of support scope wireshark Red Hat Enterprise Linux 8 Fix deferred wireshark Red Hat Enterprise Linux 9 Fix deferred wireshark https://www.cve.org/CVERecord?id=CVE-2026-15174 https://nvd.nist.gov/vuln/detail/CVE-2026-15174 https://gitlab.com/wireshark/wireshark/-/work_items/21270 https://www.wireshark.org/security/wnpa-sec-2026-52.html