{ "schema_version": "1.7.0", "id": "MGASA-2026-0493", "published": "2026-10-12T20:48:13Z", "modified": "2026-10-12T20:31:39Z", "summary": "Updated wireshark package fixes security vulnerabilities", "details": "Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark.\n(CVE-2026-95386)\nHeap-based Buffer Overflow in Wireshark. (CVE-2026-95387)\nHeap-based Buffer Overflow in Wireshark. (CVE-2026-95388)\nHeap-based Buffer Overflow in Wireshark. (CVE-2026-95389)\nNULL Pointer Dereference in Wireshark. (CVE-2026-95390)\nUse After Free in Wireshark. (CVE-2026-95391)\nBuffer Over-read in Wireshark. (CVE-2026-95392)\nHeap-based Buffer Overflow in Wireshark. (CVE-2026-95393)\nUnchecked Input for Loop Condition in Wireshark. (CVE-2026-95394)\nMissing Release of Memory after Effective Lifetime in Wireshark.\n(CVE-2026-95395)\nThe Catapult DCT2000 protocol dissector could crash. (CVE-2026-96415)\nThe IEEE 802.11 protocol dissector could crash. (CVE-2026-96416)\nThe RF4CE protocol dissector could crash. (CVE-2026-96417)\nThe TIFF protocol dissector could go into an infinite loop.\n(CVE-2026-96418)\nImporting a crafted configuration profile could crash Wireshark or\nexecute arbitrary code. (CVE-2026-96419)\nThe Toshiba file parser could crash. (CVE-2026-96420)\nThe USB HID protocol dissector could go into an infinite loop and leak\nmemory. (CVE-2026-96421)\nThe Frame protocol metadissector could crash. (CVE-2026-96422)\nThe X11 protocol dissector could crash. (CVE-2026-96423)\n", "upstream": [ "CVE-2026-95386", "CVE-2026-95387", "CVE-2026-95388", "CVE-2026-95389", "CVE-2026-95390", "CVE-2026-95391", "CVE-2026-95392", "CVE-2026-95393", "CVE-2026-95394", "CVE-2026-95395", "CVE-2026-96415", "CVE-2026-96416", "CVE-2026-96417", "CVE-2026-96418", "CVE-2026-96419", "CVE-2026-96420", "CVE-2026-96421", "CVE-2026-96422", "CVE-2026-96423" ], "references": [ { "type": "ADVISORY", "url": "https://advisories.mageia.org/MGASA-2026-0493.html" }, { "type": "REPORT", "url": "https://bugs.mageia.org/show_bug.cgi?id=36456" }, { "type": "WEB", "url": "https://lists.debian.org/debian-security-announce/2026/msg00455.html" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-97" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21487" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-101" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21545" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-93" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21481" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-100" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21549" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21550" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-99" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21510" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-98" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21523" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-96" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21492" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-110" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21589" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-109" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21564" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-104" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21574" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-107" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21565" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-106" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21553" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-105" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21541" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-103" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21566" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-102" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21525" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-108" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21563" }, { "type": "WEB", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/C5DQL3SVTFVDEEP3UXXLRF6HOVKTIQNJ/" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-94" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21501" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-95" }, { "type": "REPORT", "url": "https://gitlab.com/wireshark/wireshark/-/issues/21503" }, { "type": "WEB", "url": "https://www.wireshark.org/security/wnpa-sec-2026-92" } ], "affected": [ { "package": { "ecosystem": "Mageia:10", "name": "wireshark", "purl": "pkg:rpm/mageia/wireshark?arch=source&distro=mageia-10" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { "introduced": "0" }, { "fixed": "4.6.9-1.mga10" } ] } ], "ecosystem_specific": { "section": "core" } } ], "credits": [ { "name": "Mageia", "type": "COORDINATOR", "contact": [ "https://wiki.mageia.org/en/Packages_Security_Team" ] } ] }