Nixpkgs security tracker

Published

Permalink CVE-2026-5402

8.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 3 weeks ago
@LeSuisse accepted 1 month, 3 weeks ago
@LeSuisse ignored
2 maintainers
- @fpletz
- @bjornfor
1 month, 3 weeks ago maintainer.ignore
@LeSuisse published on GitHub 1 month, 3 weeks ago

Heap-based Buffer Overflow in Wireshark

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution

References

https://www.wireshark.org/security/wnpa-sec-2026-14.html
GitLab Issue #21090 issue-trackingpermissions-required
https://gitlab.com/wireshark/wireshark/-/work_items/21090 exploit

Affected products

Wireshark

<4.6.5

Matching in nixpkgs

pkgs.tshark

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

pkgs.wireshark

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

pkgs.wireshark-qt

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

pkgs.wireshark-cli

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

Package maintainers

Ignored maintainers (2)

@bjornfor Bjørn Forsman <bjorn.forsman@gmail.com>
@fpletz Franz Pletz <fpletz@fnordicwalking.de>

Published

Permalink CVE-2026-5654

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 3 weeks ago
@LeSuisse accepted 1 month, 3 weeks ago
@LeSuisse ignored
2 maintainers
- @bjornfor
- @fpletz
1 month, 3 weeks ago maintainer.ignore
@LeSuisse published on GitHub 1 month, 3 weeks ago

Stack-based Buffer Overflow in Wireshark

AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

References

https://www.wireshark.org/security/wnpa-sec-2026-18.html
GitLab Issue #21111 issue-trackingpermissions-required
https://gitlab.com/wireshark/wireshark/-/work_items/21111 exploit

Affected products

Wireshark

<4.4.15
<4.6.5

Matching in nixpkgs

pkgs.tshark

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

pkgs.wireshark

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

pkgs.wireshark-qt

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

pkgs.wireshark-cli

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

Package maintainers

Ignored maintainers (2)

@bjornfor Bjørn Forsman <bjorn.forsman@gmail.com>
@fpletz Franz Pletz <fpletz@fnordicwalking.de>

Published

Permalink CVE-2026-6520

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 3 weeks ago
@LeSuisse accepted 1 month, 3 weeks ago
@LeSuisse ignored
2 maintainers
- @bjornfor
- @fpletz
1 month, 3 weeks ago maintainer.ignore
@LeSuisse published on GitHub 1 month, 3 weeks ago

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

References

Affected products

Wireshark

<4.4.15
<4.6.5

Matching in nixpkgs

pkgs.tshark

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

pkgs.wireshark

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

pkgs.wireshark-qt

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

pkgs.wireshark-cli

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

Package maintainers

Ignored maintainers (2)

@bjornfor Bjørn Forsman <bjorn.forsman@gmail.com>
@fpletz Franz Pletz <fpletz@fnordicwalking.de>

Published

Permalink CVE-2026-5405

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 1 month, 3 weeks ago by @LeSuisse Activity log

Created suggestion 1 month, 3 weeks ago
@LeSuisse accepted 1 month, 3 weeks ago
@LeSuisse ignored
2 maintainers
- @bjornfor
- @fpletz
1 month, 3 weeks ago maintainer.ignore
@LeSuisse published on GitHub 1 month, 3 weeks ago

Heap-based Buffer Overflow in Wireshark

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution

References

https://www.wireshark.org/security/wnpa-sec-2026-17.html
GitLab Issue #21105 issue-trackingpermissions-required

Affected products

Wireshark

<4.4.15
<4.6.5

Matching in nixpkgs

pkgs.tshark

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

pkgs.wireshark

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

pkgs.wireshark-qt

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

pkgs.wireshark-cli

Powerful network protocol analyzer

nixos-unstable 4.6.4
- nixpkgs-unstable 4.6.4
- nixos-unstable-small 4.6.4

Package maintainers

Ignored maintainers (2)

@bjornfor Bjørn Forsman <bjorn.forsman@gmail.com>
@fpletz Franz Pletz <fpletz@fnordicwalking.de>

Published

Permalink CVE-2026-3203

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 3 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months ago
@LeSuisse deleted
2 maintainers
- @fpletz
- @bjornfor
3 months, 4 weeks ago maintainer.delete
@LeSuisse accepted 3 months, 4 weeks ago
@LeSuisse published on GitHub 3 months, 4 weeks ago

Buffer Over-read in Wireshark

RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

References

https://www.wireshark.org/security/wnpa-sec-2026-07.html
GitLab Issue #21009 issue-trackingpermissions-required

Affected products

Wireshark

<4.4.14
<4.6.4

Matching in nixpkgs

pkgs.tshark

Powerful network protocol analyzer

nixos-unstable 4.6.3
- nixpkgs-unstable 4.6.3
- nixos-unstable-small 4.6.3

pkgs.wireshark

Powerful network protocol analyzer

nixos-unstable 4.6.3
- nixpkgs-unstable 4.6.3
- nixos-unstable-small 4.6.3

pkgs.wireshark-qt

Powerful network protocol analyzer

nixos-unstable 4.6.3
- nixpkgs-unstable 4.6.3
- nixos-unstable-small 4.6.3

pkgs.wireshark-cli

Powerful network protocol analyzer

nixos-unstable 4.6.3
- nixpkgs-unstable 4.6.3
- nixos-unstable-small 4.6.3

Package maintainers

Ignored maintainers (2)

@fpletz Franz Pletz <fpletz@fnordicwalking.de>
@bjornfor Bjørn Forsman <bjorn.forsman@gmail.com>

Upstream advisory: https://www.wireshark.org/security/wnpa-sec-2026-07.html

Published

Permalink CVE-2026-3201

4.7 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 3 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months ago
@LeSuisse deleted
2 maintainers
- @fpletz
- @bjornfor
3 months, 4 weeks ago maintainer.delete
@LeSuisse accepted 3 months, 4 weeks ago
@LeSuisse published on GitHub 3 months, 4 weeks ago

Improperly Controlled Sequential Memory Allocation in Wireshark

USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service

References

https://www.wireshark.org/security/wnpa-sec-2026-05.html
GitLab Issue #20972 issue-trackingpermissions-required

Affected products

Wireshark

<4.4.14
<4.6.4

Matching in nixpkgs

pkgs.tshark

Powerful network protocol analyzer

nixos-unstable 4.6.3
- nixpkgs-unstable 4.6.3
- nixos-unstable-small 4.6.3

pkgs.wireshark

Powerful network protocol analyzer

nixos-unstable 4.6.3
- nixpkgs-unstable 4.6.3
- nixos-unstable-small 4.6.3

pkgs.wireshark-qt

Powerful network protocol analyzer

nixos-unstable 4.6.3
- nixpkgs-unstable 4.6.3
- nixos-unstable-small 4.6.3

pkgs.wireshark-cli

Powerful network protocol analyzer

nixos-unstable 4.6.3
- nixpkgs-unstable 4.6.3
- nixos-unstable-small 4.6.3

Package maintainers

Ignored maintainers (2)

@fpletz Franz Pletz <fpletz@fnordicwalking.de>
@bjornfor Bjørn Forsman <bjorn.forsman@gmail.com>

Upstream advisory: https://www.wireshark.org/security/wnpa-sec-2026-05.html

Published

Permalink CVE-2026-3202

4.7 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): High (H)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 3 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months ago
@LeSuisse deleted
2 maintainers
- @bjornfor
- @fpletz
3 months, 4 weeks ago maintainer.delete
@LeSuisse accepted 3 months, 4 weeks ago
@LeSuisse published on GitHub 3 months, 4 weeks ago

NULL Pointer Dereference in Wireshark

NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service

References

https://www.wireshark.org/security/wnpa-sec-2026-06.html
GitLab Issue #21000 issue-trackingpermissions-required

Affected products

Wireshark

<4.6.4

Matching in nixpkgs

pkgs.tshark

Powerful network protocol analyzer

nixos-unstable 4.6.3
- nixpkgs-unstable 4.6.3
- nixos-unstable-small 4.6.3

pkgs.wireshark

Powerful network protocol analyzer

nixos-unstable 4.6.3
- nixpkgs-unstable 4.6.3
- nixos-unstable-small 4.6.3

pkgs.wireshark-qt

Powerful network protocol analyzer

nixos-unstable 4.6.3
- nixpkgs-unstable 4.6.3
- nixos-unstable-small 4.6.3

pkgs.wireshark-cli

Powerful network protocol analyzer

nixos-unstable 4.6.3
- nixpkgs-unstable 4.6.3
- nixos-unstable-small 4.6.3

Package maintainers

Ignored maintainers (2)

@fpletz Franz Pletz <fpletz@fnordicwalking.de>
@bjornfor Bjørn Forsman <bjorn.forsman@gmail.com>

Upstream advisory: https://www.wireshark.org/security/wnpa-sec-2026-06.html

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.tshark

pkgs.wireshark

pkgs.wireshark-qt

pkgs.wireshark-cli

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.tshark

pkgs.wireshark

pkgs.wireshark-qt

pkgs.wireshark-cli

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.tshark

pkgs.wireshark

pkgs.wireshark-qt

pkgs.wireshark-cli

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.tshark

pkgs.wireshark

pkgs.wireshark-qt

pkgs.wireshark-cli

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.tshark

pkgs.wireshark

pkgs.wireshark-qt

pkgs.wireshark-cli

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.tshark

pkgs.wireshark

pkgs.wireshark-qt

pkgs.wireshark-cli

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.tshark

pkgs.wireshark

pkgs.wireshark-qt

pkgs.wireshark-cli

Package maintainers