← All advisories

Medium severity5.5NVD Advisory· Published Jul 8, 2026· Updated Jul 9, 2026

CVE-2026-15170

CVE-2026-15170

Description

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

Affected products

4

Wireshark/Wireshark2 versions
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*range: >=4.4.0,<4.4.17
- (no CPE)range: 4.6.0 to 4.6.6, 4.4.0 to 4.4.16
osv-coords2 versions
pkg:rpm/opensuse/wireshark&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2016.0
< 4.6.7-3.1+ 1 more
- (no CPE)range: < 4.6.7-3.1
- (no CPE)range: < 4.4.17-160000.1.1

Patches

Vulnerability mechanics

References

1

www.wireshark.org/security/wnpa-sec-2026-58.htmlnvdVendor Advisory

News mentions

1

Wireshark: Twelve DoS and Info Disclosure Vulnerabilities Disclosed Together
Vypr Intelligence · Jul 8, 2026