CVE-2026-6520

Description

A flaw was found in Wireshark. A remote attacker could exploit an infinite loop vulnerability in the OpenFlow v6 protocol dissector by sending a specially crafted packet. This could lead to a denial of service (DoS), making the Wireshark application unresponsive.

Mitigation

To mitigate this issue, avoid opening untrusted capture files or analyzing network traffic from untrusted sources with Wireshark. If the OpenFlow v6 protocol dissection is not required, it can be disabled within Wireshark's preferences to prevent processing of these packets. This can be done by navigating to "Analyze" -> "Enabled Protocols" and unchecking "OpenFlow v6". Restarting Wireshark is required for the changes to take effect.

Common Vulnerability Scoring System (CVSS) Score Details

Info alert:Important note

CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).

The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v3 Score Breakdown

Red HatNVDcve.org
Base Score6.57.55.5
Attack VectorNetworkNetworkLocal
Attack ComplexityLowLowLow
Privileges RequiredNoneNoneNone
User InteractionRequiredNoneRequired
ScopeUnchangedUnchangedUnchanged
ConfidentialityNoneNoneNone
Integrity ImpactNoneNoneNone
Availability ImpactHighHighHigh

Vector

Red Hat: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cve.org: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Understanding the Weakness (CWE)

CWE-606

Availability

Technical Impact: DoS: Resource Consumption (CPU)

Frequently Asked Questions

Not sure what something means? Check out our Security Glossary.

Want to get errata notifications? Sign up here.