Opened 7 months ago

Closed 7 months ago

#22865 closed enhancement (fixed)

wireshark-4.6.4 (Security update)

Reported by: Bruce Dubbs Owned by: Bruce Dubbs
Priority: elevated Milestone: 13.1
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New point version.

Change History (4)

comment:1 by Bruce Dubbs, 7 months ago

Owner: changed from blfs-book to Bruce Dubbs
Status: new → assigned

comment:2 by Bruce Dubbs, 7 months ago

Priority: normal → elevated
Summary: wireshark-4.6.4 → wireshark-4.6.4 (Security update)

Release notes are at ​https://www.wireshark.org/docs/relnotes/wireshark-4.6.4

There are three security issues: 

wnpa-sec-2026-05 USB HID dissector memory exhaustion. CVE-2026-3201. 
wnpa-sec-2026-06 NTS-KE dissector crash.              CVE-2026-3202.
wnpa-sec-2026-07 RF4CE Profile dissector crash.       CVE-2026-3203.

All are rated as 7.5 HIGH for Denial of Service.

comment:3 by Bruce Dubbs, 7 months ago

Fixed at commit 6f66d482be. Leaving open for security update.

comment:4 by Douglas R. Reno, 7 months ago

Resolution: → fixed
Status: assigned → closed

SA-13.0-006 issued

Note: See TracTickets for help on using tickets.