Skip to main content

Wireshark CVE-2026-76928

| EUVDEUVD-2026-63166 HIGH
NULL Pointer Dereference (CWE-476)
2026-08-19 cve@gitlab.com GHSA-3qqr-q2w4-r5qh
Null Pointer Dereference Denial Of Service Red Hat Suse
7.5
CVSS 3.1 · Vendor: gitlab
Share

Severity by source

Vendor (gitlab) PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
7.5 HIGH

Network-accessible crash with no authentication or interaction required; impact is solely process availability with no confidentiality or integrity consequences.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
HIGH
qualitative
Red Hat
7.5 HIGH
qualitative

Primary rating from Vendor (gitlab).

CVSS VectorVendor: gitlab

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
Patch available
Aug 20, 2026 - 01:01 EUVD
Analysis Generated
Aug 19, 2026 - 23:31 vuln.today
CVE Published
Aug 19, 2026 - 23:16 cve.org
HIGH 7.5

DescriptionCVE.org

X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

AnalysisAI

Null pointer dereference in Wireshark's X.509IF protocol dissector crashes the application across versions 4.6.0-4.6.7 and 4.4.0-4.4.18, enabling remote denial of service against any instance processing affected traffic. An unauthenticated network attacker can trigger the crash by injecting a malformed X.509IF packet into traffic being captured or analyzed, with no privileges or user interaction required per the CVSS:3.1/AV:N/AC:L/PR:N/UI:N vector. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Gain position to inject X.509IF traffic
Delivery
Craft malformed X.509IF packet
Exploit
Deliver packet into Wireshark capture stream
Execution
Trigger null pointer dereference in dissector
Impact
Crash Wireshark process
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The target system must be running Wireshark 4.6.0-4.6.7 or 4.4.0-4.4.18 and actively capturing or processing a packet trace that contains X.509IF protocol traffic. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 3.1 score of 7.5 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H reflects the most permissive DoS profile: fully network-accessible, zero authentication, zero interaction, low complexity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker positioned to inject packets into traffic being monitored by Wireshark - via the same network segment, a man-in-the-middle position, or by delivering a crafted .pcap file for offline analysis - sends a malformed X.509IF packet. When Wireshark's dissector processes the packet, the null pointer dereference triggers an immediate process crash, terminating the capture session. …
Remediation Users should upgrade to the first patched release above the affected ranges in each branch - the version following 4.6.7 in the 4.6.x line or 4.4.18 in the 4.4.x line. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, inventory all Wireshark deployments and identify instances running versions 4.4.0-4.4.18 or 4.6.0-4.6.7, particularly in security operations centers and incident response workflows. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-476 – NULL Pointer Dereference

View all
CVE-2016-0742 HIGH
7.5
CVE-2014-3470 MEDIUM
4.3
CVE-2017-3730 HIGH POC
7.5
CVE-2017-3169 CRITICAL POC
9.8
CVE-2016-4957 HIGH
7.5
CVE-2015-3194 HIGH
7.5
CVE-2026-21525 MEDIUM
6.2
CVE-2017-0016 MEDIUM
5.9

Same technique Null Pointer Dereference

View all
CVE-2016-0742 HIGH
7.5
CVE-2014-3470 MEDIUM
4.3
CVE-2017-3730 HIGH POC
7.5
CVE-2017-3169 CRITICAL POC
9.8
CVE-2016-4957 HIGH
7.5
CVE-2015-3194 HIGH
7.5
CVE-2026-21525 MEDIUM
6.2
CVE-2017-0016 MEDIUM
5.9

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 12 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected
SUSE Linux Enterprise Module for Desktop Applications 15 SP7 Affected

Share

CVE-2026-76928 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy