CVE-2025-1492

HIGH

Wireshark 4.2.0-4.2.10 and 4.4.0-4.4.3 - Denial of Service via Bundle Protocol and CBOR Dissector

Title source: llm
STIX 2.1

Description

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file

References (2)

Core 2
Core References
Issue Tracking issue-tracking permissions-required
https://gitlab.com/wireshark/wireshark/-/issues/20373

Scores

CVSS v3 7.8
EPSS 0.0028
EPSS Percentile 19.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-674
Status published
Products (3)
wireshark/wireshark 4.2.0 - 4.2.10
Wireshark Foundation/Wireshark 4.2.0 - 4.2.11
Wireshark Foundation/Wireshark 4.4.0 - 4.4.4
Published Feb 20, 2025
Tracked Since Feb 18, 2026