NIXPKGS-2026-1336

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-6523

5.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse ignored
  2 maintainers

  • @fpletz
  • @bjornfor
  1 month, 3 weeks ago maintainer.ignore
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-38.html
• https://gitlab.com/wireshark/wireshark/-/work_items/21177

---

Wireshark

• <4.4.15
• <4.6.5

NIXPKGS-2026-1334

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-5655

5.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse ignored
  2 maintainers

  • @fpletz
  • @bjornfor
  1 month, 3 weeks ago maintainer.ignore
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Use After Free in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-19.html
• GitLab Issue #21112 issue-trackingpermissions-required
• https://gitlab.com/wireshark/wireshark/-/work_items/21112 exploit

---

Wireshark

• <4.6.5

NIXPKGS-2026-1335

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-5299

5.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse ignored
  2 maintainers

  • @fpletz
  • @bjornfor
  1 month, 3 weeks ago maintainer.ignore
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Uncontrolled Recursion in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-12.html
• GitLab Issue #21077 issue-trackingpermissions-required

---

Wireshark

• <4.4.15
• <4.6.5

NIXPKGS-2026-1333

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-7379

5.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse ignored
  2 maintainers

  • @fpletz
  • @bjornfor
  1 month, 3 weeks ago maintainer.ignore
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Missing Release of Memory after Effective Lifetime in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-47.html
• https://gitlab.com/wireshark/wireshark/-/work_items/21214

---

Wireshark

• <4.4.15
• <4.6.5

NIXPKGS-2026-1332

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-6533

5.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse ignored
  2 maintainers

  • @fpletz
  • @bjornfor
  1 month, 3 weeks ago maintainer.ignore
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Improperly Controlled Sequential Memory Allocation in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-28.html
• GitLab Issue #21127 issue-trackingpermissions-required
• https://gitlab.com/wireshark/wireshark/-/work_items/21127 exploit

---

Wireshark

• <4.4.15
• <4.6.5

NIXPKGS-2026-1331

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-5403

7.8 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse ignored
  2 maintainers

  • @fpletz
  • @bjornfor
  1 month, 3 weeks ago maintainer.ignore
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Heap-based Buffer Overflow in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-16.html
• GitLab Issue #21103 issue-trackingpermissions-required

---

Wireshark

• <4.4.15
• <4.6.5

NIXPKGS-2026-1330

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-7376

5.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse ignored
  2 maintainers

  • @fpletz
  • @bjornfor
  1 month, 3 weeks ago maintainer.ignore
• @LeSuisse published on GitHub 1 month, 3 weeks ago

NULL Pointer Dereference in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-48.html
• https://gitlab.com/wireshark/wireshark/-/work_items/21206

---

Wireshark

• <4.4.15
• <4.6.5

NIXPKGS-2026-1329

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-6867

5.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse ignored
  2 maintainers

  • @fpletz
  • @bjornfor
  1 month, 3 weeks ago maintainer.ignore
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Improperly Controlled Sequential Memory Allocation in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-45.html
• https://gitlab.com/wireshark/wireshark/-/work_items/21191

---

Wireshark

• <4.4.15
• <4.6.5

NIXPKGS-2026-1328

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-5401

5.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse ignored
  2 maintainers

  • @fpletz
  • @bjornfor
  1 month, 3 weeks ago maintainer.ignore
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Uncontrolled Recursion in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-13.html
• GitLab Issue #21088 issue-trackingpermissions-requiredexploit

---

Wireshark

• <4.4.15
• <4.6.5

NIXPKGS-2026-1327

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-7378

5.5 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): Required (R)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): Required (R)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 1 month, 3 weeks ago
• @LeSuisse accepted 1 month, 3 weeks ago
• @LeSuisse ignored
  2 maintainers

  • @fpletz
  • @bjornfor
  1 month, 3 weeks ago maintainer.ignore
• @LeSuisse published on GitHub 1 month, 3 weeks ago

Heap-based Buffer Overflow in Wireshark

• https://www.wireshark.org/security/wnpa-sec-2026-49.html
• https://gitlab.com/wireshark/wireshark/-/work_items/21207

---

Wireshark

• <4.4.15
• <4.6.5