Catapult DCT2000 Protocol Dissector DoS in Wireshark

Publication date: 2026-07-08

Last updated on: 2026-07-08

Assigner: GitLab Inc.

Description

Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-08

Last Modified

2026-07-08

Generated

2026-07-09

AI Q&A

2026-07-09

EPSS Evaluated

N/A

NVD

CVE-2026-15174

Affected Vendors & Products

Vendor	Product	Version / Range
wireshark	wireshark	From 4.6.0 (inc) to 4.6.6 (inc)
wireshark	wireshark	From 4.4.0 (inc) to 4.4.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

Executive Summary

This vulnerability is a crash in the Catapult DCT2000 protocol dissector component of Wireshark versions 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16. It allows an attacker to cause a denial of service by triggering the crash.

Impact Analysis

The impact of this vulnerability is a denial of service condition. An attacker can cause Wireshark to crash, potentially disrupting network analysis or monitoring activities.

Hi! I’m here to help you understand CVE-2026-15174. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70