PT-2025-7516 · Wireshark+4 · Wireshark+4

Oss-Fuzz · Published 2025-02-19 · Updated 2026-04-02 · CVE-2025-1492

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.2.10 Wireshark versions 4.4.0 through 4.4.3

Description The issue allows denial of service via packet injection or crafted capture file, specifically affecting the Bundle Protocol and CBOR dissector in Wireshark. It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

Recommendations For Wireshark versions 4.2.0 through 4.2.10, update to a version outside of this range to resolve the issue. For Wireshark versions 4.4.0 through 4.4.3, update to a version outside of this range to resolve the issue. As a temporary workaround, consider avoiding the use of the Bundle Protocol and CBOR dissector until a patch is available.

Exploit

Fix

DoS

Uncontrolled Recursion

RCE

Weakness Enumeration

CWE-674

CWE-20

Related Identifiers

ALSA-2025:9121

ALT-PU-2025-3609

ALT-PU-2025-3923

BDU:2025-10912

CVE-2025-1492

OPENSUSE-SU-2025:14831-1

OPENSUSE-SU-2025_0754-1

RHSA-2025:9121

SUSE-SU-2025:0754-1

SUSE-SU-2025_0754-1

SUSE-SU-2026:1169-1

Affected Products

Alt Linux

Debian

Red Os

Suse

Wireshark

References · 66

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1492.json · Exploit
• https://errata.almalinux.org/10/ALSA-2025-9121.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-1492 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14831-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-1492 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-1492 · Vendor Advisory
• https://wireshark.org/security/wnpa-sec-2025-01.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-1492 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:9121 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1169-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0754-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-1492 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1492 · Security Note
• https://bdu.fstec.ru/vul/2025-10912 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-1492 · Security Note