CVE-2026-15164

Analyzed Analyzed - Analysis Complete

Crash in ciscodump Allows Denial of Service

Publication date: 2026-07-08

Last updated on: 2026-07-10

Assigner: GitLab Inc.

Description

Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-08

Last Modified

2026-07-10

Generated

2026-07-16

AI Q&A

2026-07-09

EPSS Evaluated

2026-07-14

NVD

CVE-2026-15164

Affected Vendors & Products

Vendor	Product	Version / Range
wireshark	wireshark	From 4.4.0 (inc) to 4.4.17 (exc)
wireshark	wireshark	From 4.6.0 (inc) to 4.6.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

Executive Summary

This vulnerability is a crash issue in the ciscodump software versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16. The crash can be triggered, leading to a denial of service condition.

Impact Analysis

The impact of this vulnerability is a denial of service (DoS), meaning that the affected ciscodump software can crash and become unavailable, potentially disrupting normal operations.

Detection Guidance

The vulnerability involves a crash in the ciscodump external capture interface of Wireshark when processing hex-dump output from Cisco devices over SSH. Detection would involve monitoring for crashes or abnormal behavior in Wireshark versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 when using the ciscodump extcap tool.

Since the issue is triggered by receiving more than 65,535 bytes of hex data for a single packet, you can monitor SSH sessions to Cisco devices for unusually large hex-dump packets or unexpected data sizes.

However, no specific detection commands or signatures are provided in the available resources.

Mitigation Strategies

To mitigate the vulnerability, users should upgrade Wireshark to versions 4.6.7 or 4.4.17 or later, where the issue has been fixed.

The fix involves adding bounds checks before memcpy operations in the ciscodump extcap tool to prevent heap buffer overflow.

Avoid connecting to untrusted or potentially malicious Cisco devices that could send malformed hex-dump data over SSH.

Compliance Impact

The provided information does not specify any direct impact of the CVE-2026-15164 vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Hi! I’m here to help you understand CVE-2026-15164. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70