Bug 2543042 (CVE-2026-96421)
| Summary: | CVE-2026-96421 wireshark: Wireshark: Denial of Service via USB HID dissector infinite loop | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in Wireshark. This vulnerability allows an attacker to cause a Denial of Service (DoS) by convincing a user to open a specially crafted packet capture file containing malformed Universal Serial Bus Human Interface Device (USB HID) traffic. When processing the malformed data, the USB HID protocol dissector enters an infinite loop and leaks memory, leading to excessive resource consumption and application unresponsiveness.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2543074 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-09-29 09:48:15 UTC
|