exploitDog

RLSA-2026:20600

Опубликовано: 04 июн. 2026

Источник: rocky

Оценка: Important

Описание

Important: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

wireshark: Heap-based Buffer Overflow in Wireshark (CVE-2026-5405)
wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark (CVE-2026-5656)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

Rocky Linux 10

Наименование	Архитектура	Релиз	RPM
wireshark	aarch64	10.el10_2	wireshark-4.4.2-10.el10_2.aarch64.rpm
wireshark-cli	aarch64	10.el10_2	wireshark-cli-4.4.2-10.el10_2.aarch64.rpm

Показывать по

Связанные CVE

Ссылки на источники

Исправления

https://bugzilla.redhat.com/show_bug.cgi?id=2464273
Red Hat - 2464273
https://bugzilla.redhat.com/show_bug.cgi?id=2464276
Red Hat - 2464276

Связанные уязвимости

SUSE-SU-2026:2437-1

suse-cvrf

около 2 месяцев назад

Security update for wireshark

ELSA-2026-20600

oracle-oval

17 дней назад

ELSA-2026-20600: wireshark security update (IMPORTANT)

CVE-2026-5656

CVSS3: 7

ubuntu

3 месяца назад

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVE-2026-5656

CVSS3: 7.8

redhat

3 месяца назад

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

CVE-2026-5656

CVSS3: 7

nvd

3 месяца назад

Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution