SharkFest US 2026 is coming to Nashville, Tennessee! Learn more and register.

wnpa-sec-2026-63 · Ciscodump extcap crash

Summary

Name: Ciscodump extcap crash

Docid: wnpa-sec-2026-63

Date: July 8, 2026

Affected versions: 4.6.0 to 4.6.6, 4.4.0 to 4.4.16

Fixed versions: 4.6.7, 4.4.17

References:

Wireshark issue 21375.
CVE-2026-15164.

Details

Description

The ciscodump external capture interface could crash.

Impact

Discovered by 0sec and Doruk Tan Ozturk. It may be possible to make the ciscodump extcap crash by convincing someone to connect to a hostile device.

Resolution

Upgrade to Wireshark 4.6.7, 4.4.17 or later.