Wireshark 4.6.5 Packet Analyzer Fixes Dozens of Vulnerabilities

Wireshark, a widely used free and open-source packet analyzer for network troubleshooting, analysis, and protocol development, has released version 4.6.5. The team says this update resolves numerous vulnerabilities, many of which stem from a growing wave of AI-assisted vulnerability reports.

The fixes cover a broad range of protocol dissectors, including Monero, BT-DHT, SMB2, ICMPv6, AFP, TLS, RDP, ZigBee, OpenFlow, WebSocket, HTTP, MySQL, IEEE 802.11, and others. Additional improvements address issues in components like the SBC and iLBC audio codecs, the K12 RF5 file parser, profile import handling, zlib and LZ77 decompression within the dissection engine, and the Sharkd utility.

Key security patches tackle crashes that could potentially allow code execution in the TLS and RDP dissectors, the SBC codec, and during profile imports. Other corrections eliminate infinite loop vulnerabilities in dissectors such as SMB2, TLS, OpenFlow, USB HID, SANE, MBIM, RPKI-Router, and UDS, among others.

Beyond security, version 4.6.5 introduces a revamped welcome page with clearer learning resources and a new sidebar offering tips and tricks. Users who prefer the previous interface can turn off the new design in the settings.

For Windows users, bundled dependencies have been upgraded: Npcap moves from version 1.86 to 1.87, and Qt from 6.9.3 to 6.10.3.

While no new protocols are added in this release, support has been enhanced for many existing ones, such as AFP, BGP, DNS, HTTP, HTTP/2, ICMPv6, IPv4, IPv6, ISAKMP, JSON 3GPP, LDAP, Modbus, MySQL, OpenFlow, OpenVPN, QUIC, SMB2, SSH, TLS certificate handling, WebSocket, and more.

Lastly, capture file compatibility has been expanded across multiple formats, including Android Logcat, BLF, Catapult DCT2000, EyeSDN, HP-UX nettl, K12, MPEG-2 transport streams, NetScaler, NetScreen, pcapng, Systemd Journal, and Toshiba Compact ISDN Router captures.

For more information, see the announcement. Wireshark 4.6.5 is available from the project’s download page.