Wireshark 4.4.9 Released With Fix For Critical Bugs and Updated Protocol Support

The Wireshark team has rolled out version 4.4.9, a maintenance release for the world’s most popular network protocol analyzer.

This update focuses on stability and reliability, delivering a series of important bug fixes and enhancing support for several existing protocols.

The new version is now available for all supported platforms, including Windows, macOS, and Linux.

Wireshark, an indispensable tool for network administrators, security professionals, and developers, allows for in-depth analysis of network traffic. It is used extensively for troubleshooting network issues, examining security problems, and for educational purposes.

The project is hosted by the non-profit Wireshark Foundation, which relies on community contributions and sponsorships to continue its work in promoting protocol analysis education.

This latest release addresses several vulnerabilities and operational bugs. A significant fix resolves a crash in the SSH dissector (wnpa-sec-2025-03), a critical issue for anyone analyzing secure shell traffic. Other notable corrections include:

• An incorrect dissection of the RDM Product Detail List ID.
• Failures in SCCP LUDT segmentation decoding.
• An issue preventing Ciscodump from initiating captures on Cisco IOS devices.
• A problem with the display of the closing context tag in BACnet WritePropertyMultiple.
• A bug in the LZ77 decoder that caused it to read a 16-bit length instead of the correct 32-bit length.

While version 4.4.9 does not introduce support for any new protocols, it does bring updates to several existing ones. Users will find improved support for BACapp, LIN, MySQL, RDM, SABP, SCCP, sFlow, and SSH.

These enhancements ensure that Wireshark can more accurately parse and display data for these protocols, reflecting the latest standards and vendor-specific implementations.

The update does not include any new or updated capture file support or changes to file format decoding. The development team’s focus for this release has been squarely on refining the existing feature set and ensuring the tool remains stable and secure for its large user base.

Network professionals are encouraged to upgrade to version 4.4.9 to benefit from the recent fixes and protocol updates, ensuring a more secure and efficient network analysis experience.

The Wireshark Foundation has officially launched the Wireshark Certified Analyst (WCA-101) certification, marking a significant milestone in professional network analysis education. 

Find this Story Interesting! Follow us on Google News, LinkedIn, and X to Get More Instant Updates.