CVE-2026-5409: Uncontrolled Recursion in Wireshark
Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Wiresharkto a version that resolves this vulnerability.Fixed in 4.6.5
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5409?
CVE-2026-5409 is classified as a denial of service vulnerability due to uncontrolled recursion in the Wireshark Monero protocol dissector.
How do I fix CVE-2026-5409?
To mitigate CVE-2026-5409, users should upgrade Wireshark to a version beyond 4.6.4 or 4.4.14.
Which versions of Wireshark are affected by CVE-2026-5409?
CVE-2026-5409 affects Wireshark versions from 4.6.0 to 4.6.4 and from 4.4.0 to 4.4.14.
What impact does CVE-2026-5409 have on system performance?
CVE-2026-5409 can lead to a denial of service by causing the application to crash due to excessive recursion.
Is there a workaround for CVE-2026-5409?
Currently, the recommended action for CVE-2026-5409 is to upgrade to a patched version of Wireshark, as there are no known workarounds.