CVE-2026-76883
published 2026-08-19CVE-2026-76883: Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
PriorityP417medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.13%
2.2th percentile
Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
| wireshark_foundation | wireshark | >= 4.4.0 < 4.4.18 | 4.4.18 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.8 | 4.6.8 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GitLab
Heap-based Buffer Overflow in Wireshark
vendor_gitlab·2026-08-19·CVSS 4.7
CVE-2026-76883 [MEDIUM] CWE-122 Heap-based Buffer Overflow in Wireshark
Heap-based Buffer Overflow in Wireshark
Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, =4.4.0, <4.4.18 (affected)
Solution: Upgrade to version 4.6.8 or above
Credit: Yazan Balawneh - CyStack Security Team
Red Hat
wireshark: Wireshark: Denial of Service via heap-based buffer overflow in Catapult DCT2000 file parser
vendor_redhat·2026-08-19·CVSS 4.7
CVE-2026-76883 [MEDIUM] CWE-120 wireshark: Wireshark: Denial of Service via heap-based buffer overflow in Catapult DCT2000 file parser
wireshark: Wireshark: Denial of Service via heap-based buffer overflow in Catapult DCT2000 file parser
Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
A flaw was found in Wireshark. A heap-based buffer overflow vulnerability exists within the Catapult DCT2000 file parser. This vulnerability could allow a local attacker to trigger a crash, leading to a denial of service, by enticing a user to open a specially crafted file.
Statement: A flaw was found in the Catapult DCT2000 file parser in Wireshark versions 4.4.0 through 4.4.17 and 4.6.0 through 4.6.7. Red Hat Enterprise Linux 6, 7, 8, and 9 ship Wireshark versions prior to the affected range and are not vulnerable. Red Hat Enterprise Linux 10 and Red Hat In-Vehicle OS ship an affected ve
VulDB
Catapult DCT2000 up to 4.4.17/4.6.7 File Parser input validation
vuldb·2026-08-20·CVSS 4.7
CVE-2026-76883 [MEDIUM] Catapult DCT2000 up to 4.4.17/4.6.7 File Parser input validation
A vulnerability, which was classified as critical, has been found in Catapult DCT2000 up to 4.4.17/4.6.7. This vulnerability affects unknown code of the component File Parser. This manipulation causes improper input validation.
This vulnerability appears as CVE-2026-76883. The attack may be initiated remotely. There is no available exploit.
It is advisable to upgrade the affected component.
GHSA
Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
ghsa_unreviewed·2026-08-20
CVE-2026-76883 [MEDIUM] CWE-122 Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-76883 wireshark: Wireshark: Denial of Service via heap-based buffer overflow in Catapult DCT2000 file parser [fedora-all]
bugzilla·2026-08-21·CVSS 4.7
CVE-2026-76883 [MEDIUM] CVE-2026-76883 wireshark: Wireshark: Denial of Service via heap-based buffer overflow in Catapult DCT2000 file parser [fedora-all]
CVE-2026-76883 wireshark: Wireshark: Denial of Service via heap-based buffer overflow in Catapult DCT2000 file parser [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
Discussion:
Fixed in the current version of wireshark. Closing.
Bugzilla
CVE-2026-76883 wireshark: Wireshark: Denial of Service via heap-based buffer overflow in Catapult DCT2000 file parser
bugzilla·2026-08-19·CVSS 4.7
CVE-2026-76883 [MEDIUM] CVE-2026-76883 wireshark: Wireshark: Denial of Service via heap-based buffer overflow in Catapult DCT2000 file parser
CVE-2026-76883 wireshark: Wireshark: Denial of Service via heap-based buffer overflow in Catapult DCT2000 file parser
Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service
2026-08-19
Published