CVE-2026-95388
published 2026-09-29CVE-2026-95388: Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
PriorityP417medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.14%
2.7th percentile
Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gitlab | wireshark | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 4.4.0 < 4.4.19 | 4.4.19 |
| wireshark | wireshark | >= 4.6.0 < 4.6.9 | 4.6.9 |
| wireshark_foundation | wireshark | >= 4.4.0 < 4.4.19 | 4.4.19 |
| wireshark_foundation | wireshark | >= 4.6.0 < 4.6.9 | 4.6.9 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Wireshark up to 4.4.18/4.6.8 Sharkd denial of service (Nessus ID 362908)
vuldb·2026-10-05·CVSS 5.5
CVE-2026-95388 [MEDIUM] Wireshark up to 4.4.18/4.6.8 Sharkd denial of service (Nessus ID 362908)
A vulnerability was found in Wireshark up to 4.4.18/4.6.8. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component Sharkd. The manipulation leads to denial of service.
This vulnerability is uniquely identified as CVE-2026-95388. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is advised.
GHSA
Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
ghsa_unreviewed·2026-09-29
CVE-2026-95388 [MEDIUM] CWE-122 Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Red Hat
wireshark: wireshark: Denial of Service via heap-based buffer overflow in sharkd
vendor_redhat·2026-09-29·CVSS 5.5
CVE-2026-95388 [MEDIUM] CWE-787 wireshark: wireshark: Denial of Service via heap-based buffer overflow in sharkd
wireshark: wireshark: Denial of Service via heap-based buffer overflow in sharkd
A flaw was found in Wireshark. A heap-based buffer overflow in the sharkd utility can cause the application to crash, resulting in a Denial of Service (DoS). An attacker could exploit this vulnerability by convincing a user to process specially crafted input.
Mitigation: To mitigate this flaw, restrict access to the sharkd daemon or remove the package if it is not required:
1. Terminate running sharkd processes if daemonized packet analysis is not required:
killall sharkd
2. If sharkd must be run over a network socket, bind it only to localhost or restrict incoming network traffic to trusted hosts using firewall rules:
firewall-cmd --remove-port=/tcp --permanent
firewall-cmd --reload
Warning: Reloading firew
GitLab
Heap-based Buffer Overflow in Wireshark
vendor_gitlab·2026-09-29·CVSS 5.5
CVE-2026-95388 [MEDIUM] CWE-122 Heap-based Buffer Overflow in Wireshark
Heap-based Buffer Overflow in Wireshark
Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Affected products: Wireshark
Affected versions: >=4.6.0, =4.4.0, <4.4.19 (affected)
Solution: Upgrade to version 4.6.9 or above
Credit: Mayank Jangid (OpenSec Intelligence)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-95388 wireshark: wireshark: Denial of Service via heap-based buffer overflow in sharkd [fedora-all]
bugzilla·2026-09-29·CVSS 5.5
CVE-2026-95388 [MEDIUM] CVE-2026-95388 wireshark: wireshark: Denial of Service via heap-based buffer overflow in sharkd [fedora-all]
CVE-2026-95388 wireshark: wireshark: Denial of Service via heap-based buffer overflow in sharkd [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
Bugzilla
CVE-2026-95388 wireshark: wireshark: Denial of Service via heap-based buffer overflow in sharkd
bugzilla·2026-09-29·CVSS 5.5
CVE-2026-95388 [MEDIUM] CVE-2026-95388 wireshark: wireshark: Denial of Service via heap-based buffer overflow in sharkd
CVE-2026-95388 wireshark: wireshark: Denial of Service via heap-based buffer overflow in sharkd
Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
2026-09-29
Published