{"id":"CVE-2025-5601","aliases":["ALPINE-CVE-2025-5601","CLSA-2026-1775032927","CLSA-2026-1775039763","DEBIAN-CVE-2025-5601","DLA-4479-1","EUVD-2025-16867","GHSA-fqw2-jpxp-qh8x","MGASA-2026-0184","OESA-2025-1660","OESA-2025-1661","OESA-2025-1662","OESA-2025-1663","OESA-2026-1546","SUSE-SU-2025:01968-1","SUSE-SU-2025:02271-1","SUSE-SU-2025:02272-1","SUSE-SU-2026:1169-1","UBUNTU-CVE-2025-5601","openSUSE-SU-2025:15308-1"],"status":"published","title":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark","description":"Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00323,"percentile":0.25486,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120","CWE-787"],"published":"2025-06-04T10:30:46Z","modified":"2026-11-03T06:33:00Z","fixes":[{"ecosystem":"Alpine:v3.22","package":"wireshark","fixed_in":["4.4.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"wireshark","fixed_in":["4.4.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"wireshark","fixed_in":["4.4.7-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"wireshark","fixed_in":["4.0.17-0+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["4.4.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["4.4.7-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"wireshark","fixed_in":["4.2.12-150600.18.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"wireshark","fixed_in":["4.2.12-150600.18.23.1","3.6.24-150000.3.121.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"wireshark","fixed_in":["4.2.12-150600.18.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"wireshark","fixed_in":["4.2.12-150600.18.23.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"wireshark","fixed_in":["4.2.12-150600.18.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"wireshark","fixed_in":["2.4.16-48.63.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"wireshark","fixed_in":["4.4.7-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.0"},{"fixed":"4.4.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.0"},{"fixed":"4.4.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.0"},{"fixed":"4.4.7-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-7.el9_6.tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"wireshark-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-7.el9_6.tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-7.el9_6.tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-4.el9.tuxcare.els3"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"wireshark-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-4.el9.tuxcare.els3"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"wireshark-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.4.10-4.el9.tuxcare.els3"}]}],"bundled":11},{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.17-0+deb12u2"}]}],"versions":["4.0.10-1","4.0.11-1","4.0.11-1~deb12u1","4.0.17-0+deb12u1","4.0.3-1","4.0.5-1~exp1","4.0.6-1","4.0.6-1~deb12u1","4.0.6-1~exp1","4.0.7-1","4.0.8-1"]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.7-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.16-0+deb11u2"}]}],"versions":["3.4.10-0+deb11u1","3.4.16-0+deb11u1","3.4.4-1","3.4.6-1~exp1","3.4.7-1","3.4.7-1~exp1","3.4.8-1","3.4.9-1"],"bundled":8},{"source":"osv","ecosystem":"Mageia:9","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.17-1.2.mga9"}]}],"bundled":21},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.7-2.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.7-1.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.7-1.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.7-1.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.14-13.oe2003sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.12-150600.18.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.12-150600.18.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.12-150600.18.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.12-150600.18.23.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.12-150600.18.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.16-48.63.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.24-150000.3.121.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0-150700.4.19.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-150700.21.8.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.4-150700.21.8.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0-150700.4.19.1"}]}],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.2-1","1.10.3-1","1.10.5-1ubuntu1","1.10.5-2","1.10.6-1","1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1","2.6.3-1~ubuntu14.04.1","2.6.4-2~ubuntu14.04.1","2.6.5-1~ubuntu14.04.1","2.6.6-1~ubuntu14.04.0","2.6.8-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm2","2.6.10-1~ubuntu14.04.0~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.7+g7fc8978-1","1.12.8+g5b6e543-2","2.0.1+g59ea380-3build1","2.0.2+ga16e22e-1","2.2.6+g32dac6a-2ubuntu0.16.04","2.6.3-1~ubuntu16.04.1","2.6.4-2~ubuntu16.04.0","2.6.5-1~ubuntu16.04.0","2.6.6-1~ubuntu16.04.0","2.6.8-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0+esm1","2.6.10-1~ubuntu16.04.0+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1","2.6.3-1~ubuntu18.04.1","2.6.4-2~ubuntu18.04.0","2.6.5-1~ubuntu18.04.0","2.6.6-1~ubuntu18.04.0","2.6.8-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0+esm1","2.6.10-1~ubuntu18.04.0+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.5-1","3.0.7-1","3.2.1-1","3.2.2-1","3.2.3-1","3.2.3-1ubuntu0.1~esm1","3.2.3-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4.7-1~exp1","3.4.9-1","3.6.2-1ubuntu1","3.6.2-2","3.6.2-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.8-1","4.0.10-1","4.0.11-1","4.2.0-1","4.2.2-1","4.2.2-1.1build1","4.2.2-1.1build2","4.2.2-1.1build3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.5-1","4.4.6-2","4.4.6-2build1","4.4.7-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.6.4-1","4.6.6-1","4.6.6-2","4.6.6-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.7-1","4.6.0-1","4.6.1-2","4.6.2-3","4.6.3-1","4.6.4-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.7-1.1"}]}]}],"products":[{"vendor":"wireshark","product":"wireshark"},{"vendor":"wireshark foundation","product":"wireshark"}],"references":[{"url":"https://www.wireshark.org/security/wnpa-sec-2025-02.html","tags":["Vendor Advisory","web","report"]},{"url":"https://gitlab.com/wireshark/wireshark/-/issues/20509","tags":["issue-tracking","permissions-required","Exploit","Issue Tracking","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5601","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fqw2-jpxp-qh8x"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-5601","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1775032927.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1775039763.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5601.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-5601","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0184.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33641","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/TDSVQBWNGPIXNB6DJ7GN3MKZXQIAMQNM/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7XDTIEL5AXYD7FSCLZTDTSH5DDELHHLL/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QKS4A6WNLC3Y3QRK3OCQ4MEHDXODKUI6/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D55JJLGZUIFAWMHEC7HM4552HI7FDQJE/","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00160.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1660","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11596","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1661","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1662","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1663","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11626","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13499","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13946","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501968-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1244081","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5601","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502271-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502272-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261169-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231475","tags":["report"]},{"url":"https://bugzilla.suse.com/1231476","tags":["report"]},{"url":"https://bugzilla.suse.com/1233593","tags":["report"]},{"url":"https://bugzilla.suse.com/1233594","tags":["report"]},{"url":"https://bugzilla.suse.com/1237414","tags":["report"]},{"url":"https://bugzilla.suse.com/1249090","tags":["report"]},{"url":"https://bugzilla.suse.com/1254108","tags":["report"]},{"url":"https://bugzilla.suse.com/1254262","tags":["report"]},{"url":"https://bugzilla.suse.com/1254471","tags":["report"]},{"url":"https://bugzilla.suse.com/1254472","tags":["report"]},{"url":"https://bugzilla.suse.com/1256734","tags":["report"]},{"url":"https://bugzilla.suse.com/1256736","tags":["report"]},{"url":"https://bugzilla.suse.com/1256738","tags":["report"]},{"url":"https://bugzilla.suse.com/1256739","tags":["report"]},{"url":"https://bugzilla.suse.com/1258907","tags":["report"]},{"url":"https://bugzilla.suse.com/1258908","tags":["report"]},{"url":"https://bugzilla.suse.com/1258909","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3203","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-5601","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5601","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-5601","title":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark","description":"Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2025-06-04T10:30:46.001Z","modified":"2026-03-27T13:56:58.863Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:32:29.607786Z"}],"euvd":[{"id":"EUVD-2025-16867","description":"Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2025-06-04T10:30:46Z","modified":"2026-03-27T13:56:58Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:25:27.277964Z"}],"ghsa":[{"id":"GHSA-fqw2-jpxp-qh8x","title":"Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service...","description":"Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2025-06-04T12:30:35Z","modified":"2025-08-13T15:31:34Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120","CWE-787"],"updated_at":"2026-11-02T15:03:16.715076Z"}],"nvd":[{"id":"CVE-2025-5601","description":"Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2025-06-04T11:15:22.11Z","modified":"2026-06-17T09:48:15.49Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-120","CWE-787"],"updated_at":"2026-11-02T14:11:10.8732Z"}],"osv":[{"id":"ALPINE-CVE-2025-5601","description":"Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2025-06-04T11:15:22.11Z","modified":"2026-11-03T06:33:00.89926346Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:15:53.944853Z"},{"id":"CVE-2025-5601","title":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark","description":"Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2025-06-04T10:30:46.001Z","modified":"2026-10-28T02:30:58.410570727Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:44:51.190588Z"},{"id":"DEBIAN-CVE-2025-5601","description":"Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2025-06-04T11:15:22.11Z","modified":"2026-09-01T20:05:54.595241972Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"OESA-2025-1660","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources.  It supports dozens of protocol capture file formats and understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as problematic, has been found in Wireshark up to 4.2.8/4.4.1 (Packet Analyzer Software).Using CWE to declare the problem leads to CWE-126. The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.Impacted is availability.Upgrading to version 4.2.9 or 4.4.2 eliminates this vulnerability.(CVE-2024-11596)\n\nColumn handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file(CVE-2025-5601)","status":"published","published":"2025-06-20T11:08:45Z","modified":"2026-08-18T01:18:00.674469007Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1661","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources.  It supports dozens of protocol capture file formats and understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as problematic, has been found in Wireshark up to 4.2.8/4.4.1 (Packet Analyzer Software).Using CWE to declare the problem leads to CWE-126. The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.Impacted is availability.Upgrading to version 4.2.9 or 4.4.2 eliminates this vulnerability.(CVE-2024-11596)\n\nColumn handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file(CVE-2025-5601)","status":"published","published":"2025-06-20T11:08:45Z","modified":"2026-08-18T01:18:00.252639826Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1662","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources.  It supports dozens of protocol capture file formats and understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as problematic, has been found in Wireshark up to 4.2.8/4.4.1 (Packet Analyzer Software).Using CWE to declare the problem leads to CWE-126. The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.Impacted is availability.Upgrading to version 4.2.9 or 4.4.2 eliminates this vulnerability.(CVE-2024-11596)\n\nColumn handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file(CVE-2025-5601)","status":"published","published":"2025-06-20T11:08:45Z","modified":"2026-08-18T01:18:00.785545979Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1663","title":"wireshark security update","description":"Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources.  It supports dozens of protocol capture file formats and understands more than a thousand protocols.\r\n\r\nSecurity Fix(es):\n\nA vulnerability, which was classified as problematic, has been found in Wireshark up to 4.2.8/4.4.1 (Packet Analyzer Software).Using CWE to declare the problem leads to CWE-126. The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.Impacted is availability.Upgrading to version 4.2.9 or 4.4.2 eliminates this vulnerability.(CVE-2024-11596)\n\nColumn handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file(CVE-2025-5601)","status":"published","published":"2025-06-20T11:08:45Z","modified":"2026-08-18T01:18:00.875137234Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2026-1546","title":"wireshark security update","description":"Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.\r\n\r\nSecurity Fix(es):\n\nMONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service(CVE-2025-11626)\n\nKafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service due to access of uninitialized pointer(CVE-2025-13499)\n\nMEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service(CVE-2025-13946)\n\nColumn handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file(CVE-2025-5601)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.644818875Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"UBUNTU-CVE-2025-5601","description":"Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file","status":"published","published":"2025-06-04T11:15:00Z","modified":"2026-10-17T12:57:08.60604837Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"CLSA-2026-1775032927","title":"wireshark: Fix of 11 CVEs","description":"- CVE-2023-6175: fix heap buffer overflow in NetScreen file parser\n- CVE-2024-0208: fix crash in GVCP dissector due to NULL string\n- CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors\n- CVE-2024-0211: fix infinite loop in DOCSIS dissector\n- CVE-2024-2955: fix use-after-free in T.38 dissector\n- CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector\n- CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors\n- CVE-2024-11596: fix buffer overflow in ECMP dissector\n- CVE-2024-24476: fix heap buffer overflow in address resolution\n- CVE-2024-24478: fix integer overflow in BGP dissector\n- CVE-2025-5601: fix crash in column prepend fence handling","status":"published","published":"2026-04-01T08:42:11Z","modified":"2026-10-21T10:47:27.597665824Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775039763","title":"wireshark: Fix of 11 CVEs","description":"- CVE-2023-6175: fix heap buffer overflow in NetScreen file parser\n- CVE-2024-0208: fix crash in GVCP dissector due to NULL string\n- CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors\n- CVE-2024-0211: fix infinite loop in DOCSIS dissector\n- CVE-2024-2955: fix use-after-free in T.38 dissector\n- CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector\n- CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors\n- CVE-2024-11596: fix buffer overflow in ECMP dissector\n- CVE-2024-24476: fix heap buffer overflow in address resolution\n- CVE-2024-24478: fix integer overflow in BGP dissector\n- CVE-2025-5601: fix crash in column prepend fence handling","status":"published","published":"2026-04-01T10:36:08Z","modified":"2026-10-21T10:46:21.842332536Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"DLA-4479-1","title":"wireshark - security update","status":"published","published":"2026-02-16T00:00:00Z","modified":"2026-02-16T14:15:43.009818Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2026-0184","title":"Updated wireshark packages fix security vulnerabilities","description":"Multiple vulnerabilities have been discovered in Wireshark, a network\nprotocol analyzer, which could result in denial of service or the\nexecution of arbitrary code.\nThis update fixes the reported issue.\n","status":"published","published":"2026-06-10T00:39:41Z","modified":"2026-06-10T00:45:05.720992695Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15308-1","title":"libwireshark18-4.4.7-1.1 on GA media","description":"These are all security issues fixed in the libwireshark18-4.4.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:37.731887Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2025:01968-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\n- CVE-2025-5601: Dissection engine crash (bsc#1244081).\n","status":"published","published":"2025-06-16T14:56:44Z","modified":"2026-02-04T04:09:21.80487Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02271-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\n- CVE-2025-5601: Dissection engine crash (bsc#1244081).\n","status":"published","published":"2025-07-10T10:08:46Z","modified":"2026-02-04T03:08:41.014344Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02272-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\n- CVE-2025-5601: Dissection engine crash (bsc#1244081).\n","status":"published","published":"2025-07-10T10:09:42Z","modified":"2025-07-10T17:01:39.112515Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2026:1169-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\nUpdate Wireshark to version 4.6.4 (jsc#PED-15400).\n\n- CVE-2024-9780: ITS dissector crash (bsc#1231475).\n- CVE-2024-9781: AppleTalk and RELOAD Framing dissector crash (bsc#1231476).\n- CVE-2024-11595: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (bsc#1233594).\n- CVE-2024-11596: Buffer Over-read in Wireshark (bsc#1233593).\n- CVE-2025-1492: Uncontrolled Recursion in Wireshark (bsc#1237414).\n- CVE-2025-5601: Column handling crashes in Wireshark allows denial of service (bsc#1244081).\n- CVE-2025-9817: NULL Pointer Dereference in ssh dissector (bsc#1249090).\n- CVE-2025-13499: a malformed packet can lead to a Kafka dissector crash (bsc#1254108).\n- CVE-2025-13674: injecting a malformed packet can cause a crash (bsc#1254262).\n- CVE-2025-13945: HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (bsc#1254471).\n- CVE-2025-13946: MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of\n  service (bsc#1254472).\n- CVE-2026-0959: denial of service via IEEE 802.11 protocol dissector crash (bsc#1256734).\n- CVE-2026-0960: denial of Service via HTTP3 protocol dissector infinite loop (bsc#1256736).\n- CVE-2026-0961: denial of Service vulnerability in BLF file parser (bsc#1256738).\n- CVE-2026-0962: denial of Service via SOME/IP-SD protocol dissector crash (bsc#1256739).\n- CVE-2026-3201: missing limit checks in USB HID protocol dissector's `parse_report_descriptor` function can lead to\n  memory exhaustion (bsc#1258907).\n- CVE-2026-3202: missing checks in NTS-KE protocol dissector can lead to crash (bsc#1258908).\n- CVE-2026-3203: missing length checks in the RF4CE Profile protocol dissector can lead to illegal memory access and\n  crash (bsc#1258909).\n\nAlso libvirt was rebuilt against wireshark for the libvirt plugin.\n","status":"published","published":"2026-04-02T08:29:30Z","modified":"2026-04-03T07:45:38.640463Z","updated_at":"2026-11-02T15:54:01.262144Z"}]}}