DEBIAN-CVE-2025-1492

DEBIAN-CVE-2025-1492 PUBLISHED CVSS 7.5 HIGH

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:12	wireshark	0, 4.0.10-1, 4.0.11-1
Debian:14	wireshark	0, 0
Debian:13	wireshark	0, 0

Timeline

Feb 20, 2025 CVE Published
May 14, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2025-1492 advisory

Open in Interactive Console →