CVE-2026-7378 - Vulnerability Details - OpenCVE

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Wireshark	Wireshark

Configuration 1 [-]

OR	cpe:2.3:a:wireshark:wireshark::::::::
	cpe:2.3:a:wireshark:wireshark::::::::

No data.

References

Link	Providers
https://gitlab.com/wireshark/wireshark/-/work_items/21207
https://nvd.nist.gov/vuln/detail/CVE-2026-7378
https://www.cve.org/CVERecord?id=CVE-2026-7378
https://www.wireshark.org/security/wnpa-sec-2026-49.html

History

Fri, 01 May 2026 19:00:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:wireshark:wireshark::::::::

Thu, 30 Apr 2026 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 30 Apr 2026 12:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-476
References		https://nvd.nist.gov/vuln/detail/CVE-2026-7378 https://www.cve.org/CVERecord?id=CVE-2026-7378
Metrics	threat_severity `None`	threat_severity `Moderate`

Thu, 30 Apr 2026 06:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Wireshark Wireshark wireshark
Vendors & Products		Wireshark Wireshark wireshark

Thu, 30 Apr 2026 05:30:00 +0000

Type	Values Removed	Values Added
Description		Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
Title		Heap-based Buffer Overflow in Wireshark
Weaknesses		CWE-122
References		https://gitlab.com/wireshark/wireshark/-/work_items/21207 https://www.wireshark.org/security/wnpa-sec-2026-49.html
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: GitLab

Published: 2026-04-30T05:04:25.612Z

Updated: 2026-04-30T15:21:01.242Z

Reserved: 2026-04-29T07:34:16.106Z

Link: CVE-2026-7378

Vulnrichment

Updated: 2026-04-30T14:48:07.693Z

NVD

Status : Analyzed

Published: 2026-04-30T06:16:17.183

Modified: 2026-05-01T18:55:20.637

Link: CVE-2026-7378

Redhat

Severity : Moderate

Publid Date: 2026-04-30T05:04:25Z

Links: CVE-2026-7378 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-7378", "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "state": "PUBLISHED", "assignerShortName": "GitLab", "dateReserved": "2026-04-29T07:34:16.106Z", "datePublished": "2026-04-30T05:04:25.612Z", "dateUpdated": "2026-04-30T15:21:01.242Z"}, "containers": {"cna": {"title": "Heap-based Buffer Overflow in Wireshark", "descriptions": [{"lang": "en", "value": "Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service"}], "affected": [{"vendor": "Wireshark Foundation", "product": "Wireshark", "versions": [{"version": "4.6.0", "status": "affected", "lessThan": "4.6.5", "versionType": "semver"}, {"version": "4.4.0", "status": "affected", "lessThan": "4.4.15", "versionType": "semver"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-122: Heap-based Buffer Overflow", "cweId": "CWE-122", "type": "CWE"}]}], "references": [{"url": "https://www.wireshark.org/security/wnpa-sec-2026-49.html"}, {"url": "https://gitlab.com/wireshark/wireshark/-/work_items/21207"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM"}}], "solutions": [{"lang": "en", "value": "Upgrade to version 4.6.5 or above"}], "credits": [{"lang": "en", "value": "Alexandre de Oliveira", "type": "finder"}], "providerMetadata": {"orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "shortName": "GitLab", "dateUpdated": "2026-04-30T05:04:25.612Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-30T14:48:03.008532Z", "id": "CVE-2026-7378", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-30T15:21:01.242Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-7378", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-30T14:48:03.008532Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-30T14:48:07.693Z"}}], "cna": {"title": "Heap-based Buffer Overflow in Wireshark", "credits": [{"lang": "en", "type": "finder", "value": "Alexandre de Oliveira"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Wireshark Foundation", "product": "Wireshark", "versions": [{"status": "affected", "version": "4.6.0", "lessThan": "4.6.5", "versionType": "semver"}, {"status": "affected", "version": "4.4.0", "lessThan": "4.4.15", "versionType": "semver"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Upgrade to version 4.6.5 or above"}], "references": [{"url": "https://www.wireshark.org/security/wnpa-sec-2026-49.html"}, {"url": "https://gitlab.com/wireshark/wireshark/-/work_items/21207"}], "descriptions": [{"lang": "en", "value": "Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-122", "description": "CWE-122: Heap-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "shortName": "GitLab", "dateUpdated": "2026-04-30T05:04:25.612Z"}}}, "cveMetadata": {"cveId": "CVE-2026-7378", "state": "PUBLISHED", "dateUpdated": "2026-04-30T15:21:01.242Z", "dateReserved": "2026-04-29T07:34:16.106Z", "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "datePublished": "2026-04-30T05:04:25.612Z", "assignerShortName": "GitLab"}, "dataVersion": "5.2"}