CVE-2025-5601

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.4.6

Description The issue is a crash in the column handling functionality of Wireshark. This can be triggered by injecting packets or using a crafted capture file, leading to a denial of service. The root cause is insufficient validation of user-supplied data within the column utility module of the Dissection engine. There is no mention of the number of potentially affected devices or any real-world incidents where this issue was exploited. The vulnerability affects the Dissection engine and specifically the column handling functionality. No specific API endpoints or vulnerable parameters are mentioned.

Recommendations Update to Wireshark version 4.4.7 or later. Update to Wireshark version 4.2.12 or later.