NIXPKGS-2026-1326

GitHub issue published 1 month, 3 weeks ago

          Permalink
          
            CVE-2026-5406
          
        5.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          1 month, 3 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              accepted
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          1 month, 3 weeks ago
          
            Uncontrolled Recursion in Wireshark
          
      https://www.wireshark.org/security/wnpa-sec-2026-10.html
    
      GitLab Issue #21070
    
    issue-trackingpermissions-required
  
      https://gitlab.com/wireshark/wireshark/-/work_items/21070
    
    exploit
  
    Wireshark

            <4.4.15
          
            <4.6.5

NIXPKGS-2026-1325

GitHub issue published 1 month, 3 weeks ago

          Permalink
          
            CVE-2026-6532
          
        5.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          1 month, 3 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              accepted
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              ignored
            
                2 maintainers
                @fpletz
@bjornfor

          1 month, 3 weeks ago
          
              maintainer.ignore
            
          @LeSuisse
          
              published on GitHub
            
          1 month, 3 weeks ago
          
            Buffer Over-read in Wireshark
          
      https://www.wireshark.org/security/wnpa-sec-2026-29.html
    
      GitLab Issue #21129
    
    issue-trackingpermissions-required
  
      GitLab Issue #21128
    
    issue-trackingpermissions-required
  
      https://gitlab.com/wireshark/wireshark/-/work_items/21129
    
    exploit
  
    Wireshark

            <4.4.15
          
            <4.6.5

NIXPKGS-2026-1324

GitHub issue published 1 month, 3 weeks ago

          Permalink
          
            CVE-2026-5408
          
        5.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          1 month, 3 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              accepted
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              ignored
            
                2 maintainers
                @fpletz
@bjornfor

          1 month, 3 weeks ago
          
              maintainer.ignore
            
          @LeSuisse
          
              published on GitHub
            
          1 month, 3 weeks ago
          
            Uncontrolled Recursion in Wireshark
          
      https://www.wireshark.org/security/wnpa-sec-2026-09.html
    
      GitLab Issue #21067
    
    issue-trackingpermissions-required
  
      https://gitlab.com/wireshark/wireshark/-/work_items/21067
    
    exploit
  
    Wireshark

            <4.4.15
          
            <4.6.5

NIXPKGS-2026-1323

GitHub issue published 1 month, 3 weeks ago

          Permalink
          
            CVE-2026-5653
          
        5.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          1 month, 3 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              accepted
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              ignored
            
                2 maintainers
                @fpletz
@bjornfor

          1 month, 3 weeks ago
          
              maintainer.ignore
            
          @LeSuisse
          
              published on GitHub
            
          1 month, 3 weeks ago
          
            Heap-based Buffer Overflow in Wireshark
          
      https://www.wireshark.org/security/wnpa-sec-2026-22.html
    
      GitLab Issue #21122
    
    issue-trackingpermissions-required
  
      https://gitlab.com/wireshark/wireshark/-/work_items/21122
    
    exploit
  
    Wireshark

            <4.4.15
          
            <4.6.5

NIXPKGS-2026-1322

GitHub issue published 1 month, 3 weeks ago

          Permalink
          
            CVE-2026-5409
          
        5.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          1 month, 3 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              accepted
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              ignored
            
                2 maintainers
                @fpletz
@bjornfor

          1 month, 3 weeks ago
          
              maintainer.ignore
            
          @LeSuisse
          
              published on GitHub
            
          1 month, 3 weeks ago
          
            Uncontrolled Recursion in Wireshark
          
      https://www.wireshark.org/security/wnpa-sec-2026-08.html
    
      GitLab Issue #21066
    
    issue-trackingpermissions-required
  
      https://gitlab.com/wireshark/wireshark/-/work_items/21066
    
    exploit
  
    Wireshark

            <4.4.15
          
            <4.6.5

NIXPKGS-2026-1321

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-6870

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 3 weeks ago
@LeSuisse accepted 1 month, 3 weeks ago
@LeSuisse ignored
2 maintainers
- @fpletz
- @bjornfor
1 month, 3 weeks ago maintainer.ignore
@LeSuisse published on GitHub 1 month, 3 weeks ago

Access of Uninitialized Pointer in Wireshark

Wireshark

<4.4.15
<4.6.5

NIXPKGS-2026-1320

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-6529

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 3 weeks ago
@LeSuisse accepted 1 month, 3 weeks ago
@LeSuisse ignored
2 maintainers
- @fpletz
- @bjornfor
1 month, 3 weeks ago maintainer.ignore
@LeSuisse published on GitHub 1 month, 3 weeks ago

Heap-based Buffer Overflow in Wireshark

Wireshark

<4.4.15
<4.6.5

NIXPKGS-2026-1319

GitHub issue published 1 month, 3 weeks ago

          Permalink
          
            CVE-2026-5407
          
        5.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          1 month, 3 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              accepted
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              ignored
            
                2 maintainers
                @fpletz
@bjornfor

          1 month, 3 weeks ago
          
              maintainer.ignore
            
          @LeSuisse
          
              published on GitHub
            
          1 month, 3 weeks ago
          
            Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
          
      https://www.wireshark.org/security/wnpa-sec-2026-11.html
    
      GitLab Issue #21073
    
    issue-trackingpermissions-required
  
      https://gitlab.com/wireshark/wireshark/-/work_items/21073
    
    exploit
  
    Wireshark

            <4.4.15
          
            <4.6.5

NIXPKGS-2026-1318

GitHub issue published 1 month, 3 weeks ago

Permalink CVE-2026-5404

4.7 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 3 weeks ago
@LeSuisse accepted 1 month, 3 weeks ago
@LeSuisse ignored
2 maintainers
- @fpletz
- @bjornfor
1 month, 3 weeks ago maintainer.ignore
@LeSuisse published on GitHub 1 month, 3 weeks ago

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

https://www.wireshark.org/security/wnpa-sec-2026-15.html
GitLab Issue #21094 issue-trackingpermissions-required

Wireshark

<4.4.15
<4.6.5

NIXPKGS-2026-1317

GitHub issue published 1 month, 3 weeks ago

          Permalink
          
            CVE-2026-6534
          
        5.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          1 month, 3 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              accepted
            
          1 month, 3 weeks ago
          
          @LeSuisse
          
              ignored
            
                2 maintainers
                @fpletz
@bjornfor

          1 month, 3 weeks ago
          
              maintainer.ignore
            
          @LeSuisse
          
              published on GitHub
            
          1 month, 3 weeks ago
          
            Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
          
      https://www.wireshark.org/security/wnpa-sec-2026-27.html
    
      GitLab Issue #21121
    
    issue-trackingpermissions-required
  
      https://gitlab.com/wireshark/wireshark/-/work_items/21121
    
    exploit
  
    Wireshark

            <4.4.15
          
            <4.6.5

Nixpkgs security tracker

Published issues

Uncontrolled Recursion in Wireshark

Buffer Over-read in Wireshark

Uncontrolled Recursion in Wireshark

Heap-based Buffer Overflow in Wireshark

Uncontrolled Recursion in Wireshark

Access of Uninitialized Pointer in Wireshark

Heap-based Buffer Overflow in Wireshark

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark