15views
Wireshark, the widely used open-source tool for packet capture and network analysis, has released version 4.6.4, bringing a mix of security patches, stability fixes, and performance improvements.
This update resolves three vulnerabilities (CVE-2026-3201, CVE-2026-3202, and CVE-2026-3203). The fixes address a memory exhaustion issue in the USB HID dissector and crash conditions affecting the NTS-KE and RF4CE Profile dissectors.
In addition to security updates, several reliability problems have been corrected. For example, Wireshark could previously fail to launch when Npcap was configured to allow access only for administrators — that issue has now been fixed.
Multiple protocol decoding problems were also improved. These include inaccuracies in Art-Net PollReply interpretation, missing support for newer Diameter RAT-Types defined in 3GPP TS 29.212, synchronization issues in the TDS dissector during certain RPC operations, and malformed packet warnings in Trigger HE Basic frames.
The release further enhances handling across a range of protocols such as BGP, IPv6, ISAKMP, MySQL, NAS-5GS, SOCKS, and USB HID.
Performance has also been refined, with a fix for a quadratic slowdown in the Expert Info subsystem that could cause long capture sessions to become progressively slower.
Command-line utilities benefit as well: TShark and editcap no longer crash when exporting to BLF format, and misleading “Dissector bug” warnings in pipeline workflows have been removed.
Finally, capture file processing has been improved. The update corrects improper writing of certain pcapng custom options, fixes invalid Darwin option blocks, and includes refinements to BLF, pcapng, and TTL handling — though it does not introduce support for any new file formats.
For more information, see the announcement.
add a comment
Setting Up a DNS Sinkhole with Windows Server 2025
A DNS Sinkhole (also called a DNS blackhole or DNS blacklist) is a cybersecurity mechanism that intercepts DNS queries for...
Let’s Encrypt Introduces DNS-PERSIST-01 for Persistent ACME DNS Validation
Let's Encrypt has introduced support for a new ACME challenge type called DNS-PERSIST-01, designed to simplify certificate issuance and renewal...
Acunetix Web Vulnerability Scanner Premium v24.10.241106172
Web applications are one of the most targeted attack surfaces in modern infrastructure. Whether you're running internal business portals, SaaS applications, or public-facing APIs, continuous vulnerability scanning is no longer optional. Acunetix Web Vulnerability Scanner is a commercial web application security scanner designed to automatically detect vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), security misconfigurations, and outdated components, while also testing authentication-protected areas and analyzing REST APIs and modern JavaScript-heavy applications. It is widely used by security teams, DevSecOps engineers, compliance auditors, penetration testers, and enterprise IT departments to...
Bugtraq-Team OS Download – Security Testing Linux Distribution
If you’re looking for a penetration-testing Linux distribution focused on security auditing, digital forensics, and ethical hacking, Bugtraq-Team OS is...
