The Wireshark Foundation has released version 4.6.8 of its widely-used network protocol analyzer, addressing 28 vulnerabilities that could lead to application crashes. This update is crucial for maintaining the stability and security of network analysis operations.
Wireshark is a leading tool for network troubleshooting, protocol analysis, software development, and education. It is extensively utilized by security operations centers (SOCs) and network engineering teams worldwide.
The vulnerabilities, identified as wnpa-sec-2026-64 through wnpa-sec-2026-91, affect various protocol dissectors and internal components. Key areas impacted include:
- Enterprise and Security Protocols: Issues were found in the Remote Desktop Protocol (RDP), Kerberos, SSH, H.245, Cryptographic Message Syntax (CMS), and X.509IF dissectors.
- Wireless and Cellular Protocols: Vulnerabilities were present in multiple Bluetooth profiles (ATT, HFP, AVRCP, BR/EDR FHS) as well as UMTS FP and RRC cellular protocol dissectors.
- Industrial and Utility Protocols: The C12.22 smart-metering protocol dissector was affected.
Many of these vulnerabilities result from improper handling of malformed or maliciously crafted packet data. An attacker could exploit these flaws by sending specially crafted packets to a network segment monitored by Wireshark, potentially causing the application to crash and disrupting network analysis activities.
Users are strongly encouraged to update to Wireshark 4.6.8 promptly to mitigate these risks. The update is available for download on the official Wireshark website.
Regular updates and vigilance are essential in the cybersecurity landscape. This release underscores the importance of promptly addressing vulnerabilities to maintain the integrity and reliability of critical network analysis tools.
