{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-95395", "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "state": "PUBLISHED", "assignerShortName": "GitLab", "dateReserved": "2026-09-22T05:34:41.674Z", "datePublished": "2026-09-29T09:33:18.011Z", "dateUpdated": "2026-09-29T15:51:43.949Z"}, "containers": {"cna": {"title": "Missing Release of Memory after Effective Lifetime in Wireshark", "descriptions": [{"lang": "en", "value": "IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service"}], "affected": [{"vendor": "Wireshark Foundation", "product": "Wireshark", "repo": "https://gitlab.com/wireshark/wireshark", "versions": [{"version": "4.6.0", "status": "affected", "lessThan": "4.6.9", "versionType": "semver"}, {"version": "4.4.0", "status": "affected", "lessThan": "4.4.19", "versionType": "semver"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-401: Missing Release of Memory after Effective Lifetime", "cweId": "CWE-401", "type": "CWE"}]}], "references": [{"url": "https://www.wireshark.org/security/wnpa-sec-2026-96.html"}, {"url": "https://gitlab.com/wireshark/wireshark/-/work_items/21492"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM"}}], "solutions": [{"lang": "en", "value": "Upgrade to version 4.6.9 or above"}], "credits": [{"lang": "en", "value": "Liu Tianzhuo (\u5218\u5929\u5353)", "type": "finder"}], "providerMetadata": {"orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "shortName": "GitLab", "dateUpdated": "2026-09-29T09:33:18.011Z"}}, "adp": [{"references": [{"url": "https://gitlab.com/wireshark/wireshark/-/work_items/21492", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-29T15:51:18.893724Z", "id": "CVE-2026-95395", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-29T15:51:43.949Z"}}]}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Wireshark", "repo": "https://gitlab.com/wireshark/wireshark", "vendor": "Wireshark Foundation", "versions": [{"lessThan": "4.6.9", "status": "affected", "version": "4.6.0", "versionType": "semver"}, {"lessThan": "4.4.19", "status": "affected", "version": "4.4.0", "versionType": "semver"}]}], "source": "cve@gitlab.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service"}], "id": "CVE-2026-95395", "lastModified": "2026-09-29T10:17:15.900", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "cve@gitlab.com", "type": "Secondary"}]}, "published": "2026-09-29T10:17:15.900", "references": [{"source": "cve@gitlab.com", "url": "https://gitlab.com/wireshark/wireshark/-/work_items/21492"}, {"source": "cve@gitlab.com", "url": "https://www.wireshark.org/security/wnpa-sec-2026-96.html"}], "sourceIdentifier": "cve@gitlab.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-401"}], "source": "cve@gitlab.com", "type": "Primary"}]}

{"bugzilla": {"description": "wireshark: wireshark: Denial of Service via memory leak in IEEE C37.118 Synchrophasor dissector", "id": "2543032", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543032"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["A flaw was found in Wireshark. A memory leak in the IEEE C37.118 Synchrophasor protocol dissector can allow an attacker to cause a Denial of Service (DoS). By convincing a user to open a maliciously crafted packet capture file, the dissector fails to release allocated memory during packet dissection. This continuous memory consumption can lead to resource exhaustion, ultimately causing the application to crash or become unresponsive."], "mitigation": {"lang": "en:us", "value": "Operational mitigation can be achieved by avoiding the inspection of untrusted packet captures or capturing traffic on untrusted networks.\nAdditionally, the affected protocol parser can be disabled in the Wireshark user interface:\n1. Open Wireshark and navigate to Analyze -> Enabled Protocols...\n2. Search for \"IEEE C37.118\" or \"Synchrophasor\".\n3. Uncheck the entry to disable the dissector, then click Save or OK.\nCaveats:\nDisabling this protocol parser prevents Wireshark from decoding IEEE C37.118 Synchrophasor traffic; corresponding packets will be shown only as raw transport layer data (such as TCP or UDP). Restarting Wireshark or reloading the active capture file may be required for the configuration change to take effect."}, "name": "CVE-2026-95395", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "wireshark", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "wireshark", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "wireshark", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "wireshark", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "wireshark", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-09-29T09:33:18Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-95395\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-95395\nhttps://gitlab.com/wireshark/wireshark/-/work_items/21492\nhttps://www.wireshark.org/security/wnpa-sec-2026-96.html"], "threat_severity": "Moderate"}

{}