CVE-2025-13945
Improperly Controlled Sequential Memory Allocation in Wireshark
5.5 MediumFix available
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
0.23%Up 0.2 points since Dec 3, 2025
What each source reports
CVE List Score used
Improperly Controlled Sequential Memory Allocation in Wireshark
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
- Record
CVE-2025-13945- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-1325
- Updated
- 2026-11-02
EUVDEUVD-2025-200733
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
- Record
EUVD-2025-200733- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-2q7x-94rj-f68w
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
- Record
GHSA-2q7x-94rj-f68w- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-1325
- Updated
- 2026-11-02
NVD
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
- Record
CVE-2025-13945- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-1325
- Updated
- 2026-11-02
OSV
Improperly Controlled Sequential Memory Allocation in Wireshark
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
- Record
CVE-2025-13945- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-1325
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-13945
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
- Record
DEBIAN-CVE-2025-13945- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVUBUNTU-CVE-2025-13945
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
- Record
UBUNTU-CVE-2025-13945- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2026-0184 No score
Updated wireshark packages fix security vulnerabilities
Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer, which could result in denial of service or the execution of arbitrary code. This update fixes the reported issue.
- Record
MGASA-2026-0184- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15799-1 No score
libwireshark19-4.6.2-1.1 on GA media
These are all security issues fixed in the libwireshark19-4.6.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15799-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20151-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
Update to Wireshark 4.4.13:
- CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- CVE-2025-13499: Kafka dissector crash (bsc#1254108).
- CVE-2025-13945: HTTP3 dissector crash (bsc#1254471).
- CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
- CVE-2025-9817: SSH dissector crash (bsc#1249090).
- CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).
- CVE-2026-0961: BLF file parser crash (bsc#1256738).
- CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).
Full changelog:
https://www.wireshark.org/docs/relnotes/wireshark-4.4.13.html
- Record
openSUSE-SU-2026:20151-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:1169-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
Update Wireshark to version 4.6.4 (jsc#PED-15400).
- CVE-2024-9780: ITS dissector crash (bsc#1231475).
- CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash (bsc#1231476).
- CVE-2024-11595: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (bsc#1233594).
- CVE-2024-11596: Buffer Over-read in Wireshark (bsc#1233593).
- CVE-2025-1492: Uncontrolled Recursion in Wireshark (bsc#1237414).
- CVE-2025-5601: Column handling crashes in Wireshark allows denial of service (bsc#1244081).
- CVE-2025-9817: NULL Pointer Dereference in ssh dissector (bsc#1249090).
- CVE-2025-13499: a malformed packet can lead to a Kafka dissector crash (bsc#1254108).
- CVE-2025-13674: injecting a malformed packet can cause a crash (bsc#1254262).
- CVE-2025-13945: HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (bsc#1254471).
- CVE-2025-13946: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service (bsc#1254472).
- CVE-2026-0959: denial of service via IEEE 802.11 protocol dissector crash (bsc#1256734).
- CVE-2026-0960: denial of Service via HTTP3 protocol dissector infinite loop (bsc#1256736).
- CVE-2026-0961: denial of Service vulnerability in BLF file parser (bsc#1256738).
- CVE-2026-0962: denial of Service via SOME/IP-SD protocol dissector crash (bsc#1256739).
- CVE-2026-3201: missing limit checks in USB HID protocol dissector's
parse_report_descriptorfunction can lead to memory exhaustion (bsc#1258907). - CVE-2026-3202: missing checks in NTS-KE protocol dissector can lead to crash (bsc#1258908).
- CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory access and crash (bsc#1258909).
Also libvirt was rebuilt against wireshark for the libvirt plugin.
- Record
SUSE-SU-2026:1169-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20222-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
Update to Wireshark 4.4.13:
- CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- CVE-2025-13499: Kafka dissector crash (bsc#1254108).
- CVE-2025-13945: HTTP3 dissector crash (bsc#1254471).
- CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
- CVE-2025-9817: SSH dissector crash (bsc#1249090).
- CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).
- CVE-2026-0961: BLF file parser crash (bsc#1256738).
- CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).
Full changelog:
https://www.wireshark.org/docs/relnotes/wireshark-4.4.13.html
- Record
SUSE-SU-2026:20222-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 4.0.17-0+deb12u2, plus listed versions 4.0.10-14.0.11-14.0.11-1~deb12u14.0.17-0+deb12u14.0.3-1 Show 6 moreShow less4.0.5-1~exp14.0.6-14.0.6-1~deb12u14.0.6-1~exp14.0.7-14.0.8-1 |
4.0.17-0+deb12u2 |
wiresharkDebian:13 |
before 4.4.13-0+deb13u1, plus listed versions 4.4.7-14.4.8-0exp14.4.9-1 |
4.4.13-0+deb13u1 |
wiresharkDebian:14 |
before 4.6.2-1, plus listed versions 4.4.7-14.4.8-0exp14.4.9-14.6.0-0exp14.6.0-1 Show 4 moreShow less4.6.0~rc1-0exp14.6.0~rc1-0exp24.6.1-14.6.1-2 |
4.6.2-1 |
wiresharkDebian:11 From an advisory covering 8 CVEs |
before 3.4.16-0+deb11u2, plus listed versions 3.4.10-0+deb11u13.4.16-0+deb11u13.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1 |
3.4.16-0+deb11u2 |
wiresharkDebian:13 From an advisory covering 9 CVEs |
before 4.4.13-0+deb13u1, plus listed versions 4.4.7-14.4.8-0exp14.4.9-1 |
4.4.13-0+deb13u1 |
wiresharkMageia:9 From an advisory covering 21 CVEs |
before 4.0.17-1.2.mga9 | 4.0.17-1.2.mga9 |
libvirtSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 18 CVEs |
before 11.0.0-150700.4.19.1 | 11.0.0-150700.4.19.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 18 CVEs |
before 4.6.4-150700.21.8.1 | 4.6.4-150700.21.8.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 18 CVEs |
before 4.6.4-150700.21.8.1 | 4.6.4-150700.21.8.1 |
libvirtSUSE:Linux Enterprise Module for Server Applications 15 SP7 From an advisory covering 18 CVEs |
before 11.0.0-150700.4.19.1 | 11.0.0-150700.4.19.1 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkSUSE:Linux Enterprise Server 16.0 From an advisory covering 8 CVEs |
before 4.4.13-160000.1.1 | 4.4.13-160000.1.1 |
wiresharkSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 8 CVEs |
before 4.4.13-160000.1.1 | 4.4.13-160000.1.1 |
wiresharkUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3 |
None known |
wiresharkUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 8 moreShow less2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 7 moreShow less2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2 |
None known |
wiresharkUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1 |
None known |
wiresharkUbuntu:24.04:LTS |
All versions, plus listed versions 4.0.8-14.0.10-14.0.11-14.2.0-14.2.2-14.2.2-1.1build14.2.2-1.1build24.2.2-1.1build3 |
None known |
wiresharkUbuntu:25.10 |
All versions, plus listed versions 4.4.5-14.4.6-24.4.6-2build14.4.7-1 |
None known |
wiresharkUbuntu:26.10 |
All versions, plus listed versions 4.6.4-14.6.6-14.6.6-24.6.6-2build1 |
None known |
wiresharkUbuntu:26.04:LTS |
All versions, plus listed versions 4.4.7-14.6.0-14.6.1-24.6.2-34.6.3-14.6.4-1 |
None known |
wiresharkopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 4.6.2-1.1 | 4.6.2-1.1 |
wiresharkopenSUSE:Leap 16.0 From an advisory covering 8 CVEs |
before 4.4.13-160000.1.1 | 4.4.13-160000.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-13945 is a medium vulnerability (CVSS 5.5) in Wireshark, published December 3, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 14th percentile. Fixed in wireshark 4.0.17-0+deb12u2.
References
wireshark.org/security/wnpa-sec-2025-07.html
gitlab.com/wireshark/wireshark/-/issues/20860
nvd.nist.gov/vuln/detail/CVE-2025-13945
github.com/advisories/GHSA-2q7x-94rj-f68w
security-tracker.debian.org/tracker/CVE-2025-13945
Show 49 moreShow less
advisories.mageia.org/MGASA-2026-0184.html
bugs.mageia.org/show_bug.cgi?id=33641
lists.opensuse.org/archives/list/[email protected]/message/TDSVQBWNGPIXNB6DJ7GN3MKZXQIAMQNM
lists.fedoraproject.org/archives/list/[email protected]/message/7XDTIEL5AXYD7FSCLZTDTSH5DDELHHLL
lists.debian.org/debian-security-announce/2026/msg00160.html
suse.com/support/update/announcement/2026/suse-su-20261169-1
bugzilla.suse.com/1231475
ubuntu.com/security/CVE-2025-13945
cve.org/CVERecord?id=CVE-2025-13945