CVE-2025-5601
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
Summary
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
Original description
The description as published by the source.
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-5601 wireshark Fixed in: 3.4.16-0+deb11u2
- Ubuntu UBUNTU-CVE-2025-5601 wireshark
References
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com
- web wireshark.org