CVE-2026-76924

Analyzed Analyzed - Analysis Complete

Kerberos Protocol Dissector Crash in Wireshark

Publication date: 2026-08-19

Last updated on: 2026-09-01

Assigner: GitLab Inc.

Description

Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-09-01

Generated

2026-09-09

AI Q&A

2026-08-20

EPSS Evaluated

2026-09-07

NVD

CVE-2026-76924

EUVD

EUVD-2026-63159

Affected Vendors & Products

Vendor	Product	Version / Range
wireshark	wireshark	From 4.6.0 (inc) to 4.6.8 (exc)
wireshark	wireshark	From 4.4.0 (inc) to 4.4.18 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability involves a crash in the Kerberos protocol dissector within versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 of a software. The crash can be triggered remotely and leads to a denial of service, making the system unavailable for legitimate users.

Detection Guidance

This vulnerability causes a Kerberos protocol dissector crash leading to denial of service. Detection may involve monitoring for crashes in network services using Kerberos authentication or inspecting logs for protocol parsing failures.

Impact Analysis

This vulnerability can cause your system to become unresponsive or crash when processing certain Kerberos protocol traffic. This results in a denial of service, disrupting access to services that rely on Kerberos authentication.

Compliance Impact

This vulnerability causes a denial of service due to a Kerberos protocol dissector crash, which could disrupt authentication services. Such disruptions may impact compliance with standards requiring reliable access controls, such as GDPR (data availability) or HIPAA (system availability for protected health information). However, specific compliance impacts are not detailed in the provided context.

Mitigation Strategies

Update Kerberos to versions outside the affected range (4.6.0 to 4.6.7 and 4.4.0 to 4.4.18) to prevent the denial of service issue.

Hi! I’m here to help you understand CVE-2026-76924. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70