SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

alma_linux ALSA-2026:83546: ALSA-2026:83546: wireshark security update (High)

rocky_linux RLSA-2026:83546: RLSA-2026:83546: wireshark security update (Important)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83546 advisory.

    * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886)
      * wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write     (CVE-2026-76880)
      * wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)
      * wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)
      * wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector     (CVE-2026-95387)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83546 advisory.

    * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886)

    * wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880)

    * wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)

    * wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)

    * wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector     (CVE-2026-95387)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83546 advisory.

    - Fix DoS via heap-based buffer overflow in SPDY dissector (CVE-2026-95387)
    - Fix DoS vulnerability in H.245 protocol dissector (CVE-2026-76927)
    - Fix DoS vulnerability in ESS protocol dissector (CVE-2026-76919)
    - Fix DoS via C12.22 protocol dissector crash (CVE-2026-76886)
    - Fix DoS via RRC protocol dissector out-of-bounds write (CVE-2026-76880)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83546 advisory.

    The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running     on a computer network.

    Security Fix(es):

    * wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash (CVE-2026-76886)

    * wireshark: Wireshark: Denial of Service via RRC protocol dissector out-of-bounds write (CVE-2026-76880)

    * wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)

    * wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)

    * wireshark: wireshark: Denial of Service via heap-based buffer overflow in SPDY dissector     (CVE-2026-95387)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6541 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6541-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     October 04, 2026                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : wireshark     CVE ID         : CVE-2026-95387 CVE-2026-95388 CVE-2026-95389 CVE-2026-95392                      CVE-2026-95393 CVE-2026-95394 CVE-2026-95395 CVE-2026-96415                      CVE-2026-96416 CVE-2026-96417 CVE-2026-96418 CVE-2026-96419                      CVE-2026-96420 CVE-2026-96421 CVE-2026-96422 CVE-2026-96423

    Multiple vulnerabilities have been discocvered in Wireshark, a network     protocol analyzer which could result in denial of service or the     execution of arbitrary code.

    For the stable distribution (trixie), these problems have been fixed in     version 4.4.19-0+deb13u1.

    We recommend that you upgrade your wireshark packages.

    For the detailed security status of wireshark please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/wireshark

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-95387)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.9 advisory.

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

  - MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service     (CVE-2025-13946)

  - IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of     service (CVE-2026-0959)

  - HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service     (CVE-2026-0960)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.19. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.19 advisory.

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service     via packet injection or crafted capture file (CVE-2024-11595)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

  - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-9780)

  - AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of     service via packet injection or crafted capture file (CVE-2024-9781)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.4.19. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.19 advisory.

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service     via packet injection or crafted capture file (CVE-2024-11595)

  - ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet     injection or crafted capture file (CVE-2024-11596)

  - ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture     file (CVE-2024-9780)

  - AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of     service via packet injection or crafted capture file (CVE-2024-9781)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.9 advisory.

  - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service     (CVE-2026-76879, CVE-2026-76886)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

  - MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service     (CVE-2025-13946)

  - IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of     service (CVE-2026-0959)

  - HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service     (CVE-2026-0960)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
366532	AlmaLinux 9 : wireshark (ALSA-2026:83546)	Nessus	Alma Linux Local Security Checks	Local	critical
366502	RockyLinux 9 : wireshark (RLSA-2026:83546)	Nessus	Rocky Linux Local Security Checks	Local	critical
366324	Oracle Linux 9 : wireshark (ELSA-2026-83546)	Nessus	Oracle Linux Local Security Checks	Local	critical
366221	RHEL 9 : wireshark (RHSA-2026:83546)	Nessus	Red Hat Local Security Checks	Local	critical
362908	Debian dsa-6541 : libwireshark-data - security update	Nessus	Debian Local Security Checks	Local	high
351263	Linux Distros Unpatched Vulnerability : CVE-2026-95387	Nessus	Misc.	Local	high
349570	Wireshark 4.6.x < 4.6.9 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	Local	critical
349569	Wireshark 4.4.x < 4.4.19 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	Local	critical
349568	Wireshark 4.4.x < 4.4.19 Multiple Vulnerabilities	Nessus	Windows	Local	critical
349567	Wireshark 4.6.x < 4.6.9 Multiple Vulnerabilities	Nessus	Windows	Local	critical

Detections

Analytics

CVE-2026-95387

high

Tenable Plugins

Coming Soon

critical

critical

critical

critical

high

high

critical

critical

critical

critical