PT-2025-23794 · Wireshark+5 · Wireshark+5

Published 2025-06-04 · Updated 2026-04-02 · CVE-2025-5601

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.4.6

Description The issue is a crash in the column handling functionality of Wireshark. This can be triggered by injecting packets or using a crafted capture file, leading to a denial of service. The root cause is insufficient validation of user-supplied data within the column utility module of the Dissection engine. There is no mention of the number of potentially affected devices or any real-world incidents where this issue was exploited. The vulnerability affects the Dissection engine and specifically the column handling functionality. No specific API endpoints or vulnerable parameters are mentioned.

Recommendations Update to Wireshark version 4.4.7 or later. Update to Wireshark version 4.2.12 or later.

Exploit

Fix

DoS

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-120

Related Identifiers

ALT-PU-2025-11739

BDU:2025-10884

CVE-2025-5601

OESA-2025-1660

OESA-2025-1661

OESA-2025-1662

OESA-2025-1663

OESA-2026-1546

OPENSUSE-SU-2025:15308-1

SUSE-SU-2025:01968-1

SUSE-SU-2025:02271-1

SUSE-SU-2025:02272-1

SUSE-SU-2025_01968-1

SUSE-SU-2025_02271-1

SUSE-SU-2025_02272-1

SUSE-SU-2026:1169-1

Affected Products

Alt Linux

Astra Linux

Debian

Red Os

Suse

Wireshark

References · 80

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5601.json · Exploit
• 🔥 https://gitlab.com/wireshark/wireshark/-/issues/20509 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11626 · Security Note
• https://osv.dev/vulnerability/CVE-2025-5601 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1661 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-5601 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1546 · Vendor Advisory
• https://wireshark.org/security/wnpa-sec-2025-02.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-5601 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-5601 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10884 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01968-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1169-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15308-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5601 · Security Note