CVE-2025-5601

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-5601
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5601.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-5601
Downstream
CLSA (2)
DEBIAN (1)
MGASA (1)
OESA (5)
openSUSE (1)
SUSE (4)
UBUNTU (1)
Related
openSUSE (1)
SUSE (4)
Published
2025-06-04T10:30:46Z
Modified
2026-10-22T02:47:50Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
Details

Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file

Database specific 
{
    "cna_assigner":  "GitLab",
    "cwe_ids":  [
        "CWE-120"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5601.json"
}
References

Affected packages

Git / gitlab.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://gitlab.com/wireshark/wireshark
Events
Introduced
54eedfc63953c8180b5a9c60015917cce7a2548a
Fixed
07769b946e98cf8f6e76a2da06363f5323dbd0ee
Introduced
009a163470b581c7d3ee66d89c819cef1f9e50fe
Fixed
7980339b16307b07ff84f7878e68fde07d71fc8b
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.2.0"
                },
                {
                    "fixed":  "4.2.12"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.4.0"
                },
                {
                    "fixed":  "4.4.7"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Affected versions

v4.*
v4.2.0
v4.2.1
v4.2.10
v4.2.10rc0
v4.2.11
v4.2.11rc0
v4.2.12rc0
v4.2.1rc0
v4.2.2
v4.2.2rc0
v4.2.3
v4.2.3rc0
v4.2.4
v4.2.4rc0
v4.2.5
v4.2.5rc0
v4.2.6
v4.2.6rc0
v4.2.7
v4.2.7rc0
v4.2.8
v4.2.8rc0
v4.2.9
v4.2.9rc0
v4.4.0
v4.4.1
v4.4.1rc0
v4.4.2
v4.4.2rc0
v4.4.3
v4.4.3rc0
v4.4.4
v4.4.4rc0
v4.4.5
v4.4.5rc0
v4.4.6
v4.4.6rc0
v4.4.7rc0
wireshark-4.*
wireshark-4.2.0
wireshark-4.2.1
wireshark-4.2.10
wireshark-4.2.11
wireshark-4.2.2
wireshark-4.2.3
wireshark-4.2.4
wireshark-4.2.5
wireshark-4.2.6
wireshark-4.2.7
wireshark-4.2.8
wireshark-4.2.9
wireshark-4.4.0
wireshark-4.4.1
wireshark-4.4.2
wireshark-4.4.3
wireshark-4.4.4
wireshark-4.4.5
wireshark-4.4.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5601.json"