[Git][security-tracker-team/security-tracker][master] more wireshark issues CVEfied

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Aug 20 11:50:00 BST 2026 


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
41ddf0c3 by Moritz Muehlenhoff at 2026-08-20T12:19:03+02:00
more wireshark issues CVEfied

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7,19 +7,33 @@ CVE-2026-76956 (In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of g
 	- expat <unfixed>
 	NOTE: https://github.com/libexpat/libexpat/pull/1326
 CVE-2026-76929 (Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows  ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-84.html
+	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21460
 CVE-2026-76928 (X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-87.html
+	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21469
 CVE-2026-76927 (H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 a ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-77.html
+	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21447
 CVE-2026-76926 (BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4 ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-70.html
+	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21435
 CVE-2026-76924 (Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.1 ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-78.html
+	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21449
 CVE-2026-76923 (Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4 ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-79.html
+	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21451
 CVE-2026-76922 (Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4. ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-80.html
+	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21452
 CVE-2026-76921 (CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 all ...)
 	TODO: check
 CVE-2026-76920 (3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 ...)
@@ -51,7 +65,9 @@ CVE-2026-76887 (Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4
 CVE-2026-76886 (C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18  ...)
 	TODO: check
 CVE-2026-76885 (Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.1 ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-71.html
+	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21414
 CVE-2026-76884 (ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows den ...)
 	TODO: check
 CVE-2026-76883 (Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4. ...)
@@ -67,7 +83,9 @@ CVE-2026-76881 (CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.
 CVE-2026-76880 (RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 all ...)
 	TODO: check
 CVE-2026-76879 (C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18  ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-89.html
+	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/21480 (private)
 CVE-2026-76878 (In OpenStack Aodh before 22.0.1, the alarm list API bypasses project s ...)
 	- aodh <unfixed> (bug #1144879)
 	- watcher 16.0.0-5 (bug #1144880)
@@ -12020,14 +12038,6 @@ CVE-2026-XXXX [wnpa-sec-2026-68 TTX Logger file parser crash]
 CVE-2026-XXXX [wnpa-sec-2026-69 Dissection engine reassembly crash]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-69.html
-CVE-2026-XXXX [wnpa-sec-2026-70 BUSMASTER file parser abnormal exit]
-	- wireshark <unfixed>
-	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-70.html
-	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21435
-CVE-2026-XXXX [wnpa-sec-2026-71 Tektronix K12xx file parser crash]
-	- wireshark <unfixed>
-	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-71.html
-	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21414
 CVE-2026-XXXX [wnpa-sec-2026-72 ERF file parser crash]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-72.html
@@ -12040,47 +12050,19 @@ CVE-2026-XXXX [wnpa-sec-2026-76 CMS protocol dissector crash]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-76.html
 	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21446
-CVE-2026-XXXX [wnpa-sec-2026-77 H.245 protocol dissector crash]
-	- wireshark <unfixed>
-	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-77.html
-	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21447
-CVE-2026-XXXX [wnpa-sec-2026-78 Kerberos protocol dissector crash]
-	- wireshark <unfixed>
-	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-78.html
-	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21449
-CVE-2026-XXXX [wnpa-sec-2026-79 Bluetooth HFP Profile protocol dissector crash]
-	- wireshark <unfixed>
-	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-79.html
-	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21451
-CVE-2026-XXXX [wnpa-sec-2026-80 Bluetooth BR/EDR FHS protocol dissector crash]
-	- wireshark <unfixed>
-	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-80.html
-	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21452
 CVE-2026-XXXX [wnpa-sec-2026-83 CMS protocol dissector crash]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-83.html
 	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21458
 	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/21457 (private)
-CVE-2026-XXXX [wnpa-sec-2026-84 Pcapng file parser crash]
-	- wireshark <unfixed>
-	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-84.html
-	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21460
 CVE-2026-XXXX [wnpa-sec-2026-85 SSH protocol dissector crash]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-85.html
 	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21465
-CVE-2026-XXXX [wnpa-sec-2026-87 X.509IF protocol dissector crash]
-	- wireshark <unfixed>
-	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-87.html
-	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21469
 CVE-2026-XXXX [wnpa-sec-2026-88 RRC protocol dissector crash]
 	- wireshark <unfixed>
 	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-88.html
 	NOTE: https://gitlab.com/wireshark/wireshark/-/work_items/21478
-CVE-2026-XXXX [wnpa-sec-2026-89 C12.22 protocol dissector crash]
-	- wireshark <unfixed>
-	NOTE: https://www.wireshark.org/security/wnpa-sec-2026-89.html
-	NOTE: https://gitlab.com/wireshark/wireshark/-/issues/21480 (private)
 CVE-2026-19696 (Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 ...)
 	- wireshark <unfixed>
 	[trixie] - wireshark <not-affected> (Only affects 4.6)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41ddf0c3af32106c50b942ff440adbcff9065307

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41ddf0c3af32106c50b942ff440adbcff9065307
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260820/c3d8606c/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list