RLSA-2026:93627: Important: wireshark security update
The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.
Security Fix(es):
wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/wiresharkto a version that resolves this vulnerability.Fixed in 1:2.6.2-22.el8_10
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The CVSS vector indicates that the issue is network-reachable, requires no privileges, and does not require user interaction. Exploitation has high attack complexity.
What is the potential impact of successful exploitation?
The advisory identifies a heap-based buffer overflow in the SPDY dissector that can cause denial of service. The supplied CVSS vector also rates confidentiality, integrity, and availability impact as high.
Which systems should be prioritized for remediation?
Prioritize Rocky Linux systems with the wireshark package installed, particularly systems that capture or analyze untrusted network traffic and may process SPDY traffic.