Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-08-19T22:35:24 wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H CWE-617

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

A flaw was found in Wireshark. An unauthenticated remote attacker could exploit a vulnerability in the C12.22 protocol dissector by sending specially crafted network traffic. This could lead to a crash of the application, resulting in a Denial of Service (DoS).

This Moderate impact denial of service vulnerability in Wireshark's C12.22 protocol dissector could be triggered by processing a specially crafted capture file or analyzing malicious network traffic. Exploitation requires user interaction, such as opening a malicious file, limiting its impact in typical Red Hat deployments where Wireshark is used for network analysis rather than as a continuously exposed service. Do not populate the C12.22 decryption table, and disable the c1222.decrypt preference if crypto verification is not required. Avoid opening untrusted capture files or capturing C12.22 (TCP/1153) traffic from untrusted networks. If the C12.22 dissector is unused, disable it in protocol preferences. Red Hat Enterprise Linux 10 Affected wireshark Red Hat Enterprise Linux 6 Out of support scope wireshark Red Hat Enterprise Linux 7 Affected wireshark Red Hat Enterprise Linux 8 Affected wireshark Red Hat Enterprise Linux 9 Affected wireshark https://www.cve.org/CVERecord?id=CVE-2026-76886 https://nvd.nist.gov/vuln/detail/CVE-2026-76886 https://gitlab.com/wireshark/wireshark/-/work_items/21439 https://www.wireshark.org/security/wnpa-sec-2026-75.html