Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10 enterprise_linux:10.0 | wireshark | 1:4.4.2-3.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | wireshark-cli | 1:4.4.2-3.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | wireshark-cli-debuginfo | 1:4.4.2-3.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | wireshark-debuginfo | 1:4.4.2-3.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | wireshark-debugsource | 1:4.4.2-3.el10_0 |
| Red Hat · RHEL 10 enterprise_linux:10.0 | wireshark-devel | 1:4.4.2-3.el10_0 |
Vulnerabilities 1
-
High 7.8
Uncontrolled Recursion in Wireshark
Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2346737
-
article
https://issues.redhat.com/browse/RHEL-93153
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9121.json
-
report
https://access.redhat.com/security/cve/CVE-2025-1492
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-1492
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1492
-
article
https://gitlab.com/wireshark/wireshark/-/issues/20373
-
article
https://www.wireshark.org/security/wnpa-sec-2025-01.html