Skip to content
OpenAdvisories
High · 7.8 CVE-2025-13499 EUVD-2025-198429GHSA-6fqw-rh3v-4vph

Access of Uninitialized Pointer in Wireshark

Published Nov 21, 2025 · Updated Mar 27, 2026 · Assigned by GitLab

Vendor: Wireshark Foundation Product: Wireshark Package: wireshark Package: wireshark Package: wireshark Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service

Affected products

VendorProductAffectedFixed
Wireshark Foundation Wireshark 4.6.0, 4.4.0 – < 4.4.11 4.4.11

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 wireshark 4.6.1-1 —
Debian 13 wireshark 4.4.13-0+deb13u1 DSA-6124-1
Debian 12 wireshark 4.0.17-0+deb12u2 —
Debian 11 wireshark 3.4.16-0+deb11u2 DLA-4479-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 wireshark No fix yet —
Ubuntu 26.04 LTS wireshark No fix yet —
Ubuntu 25.10 wireshark No fix yet —
Ubuntu 24.04 LTS wireshark No fix yet —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 22.04 LTS wireshark No fix yet —
Ubuntu Pro 20.04 LTS wireshark No fix yet —
Ubuntu Pro 18.04 LTS wireshark No fix yet —
Ubuntu Pro 16.04 LTS wireshark No fix yet —
Ubuntu Pro 14.04 LTS wireshark No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 wireshark +2 1:4.4.2-4.el10_1.1 RHSA-2025:23083
RHEL 9 wireshark +2 1:3.4.10-8.el9_7.1 RHSA-2025:23142
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS wireshark +2 1:4.4.2-3.el10_0.1 RHSA-2026:0483
RHEL 9.6 EUS wireshark +2 1:3.4.10-7.el9_6.1 RHSA-2026:0454
RHEL 9.4 EUS wireshark +2 1:3.4.10-6.el9_4.1 RHSA-2026:0432
RHEL 9.2 E4S wireshark +1 1:3.4.10-4.el9_2.1 RHSA-2026:0452
RHEL 9.0 E4S wireshark +1 1:3.4.10-1.el9_0.1 RHSA-2026:0433

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 wireshark +2 1:4.4.2-4.el10_1.1 ALSA-2025:23083
AlmaLinux 9 wireshark +2 1:3.4.10-8.el9_7.1 ALSA-2025:23142

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 wireshark 1:4.4.2-4.el10_1.1 RLSA-2025:23083
Rocky Linux 9 wireshark 1:3.4.10-8.el9_7.1 RLSA-2025:23142

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 libvirt 11.0.0-150700.4.19.1 SUSE-SU-2026:1169-1
SLES 15 SP7 wireshark 3.6.24-150000.3.127.1 SUSE-SU-2026:1169-1, SUSE-SU-2025:4440-1, SUSE-SU-2025:4413-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 wireshark 4.4.13-160000.1.1 SUSE-SU-2026:20222-1
SLES 16.0 wireshark 4.4.13-160000.1.1 SUSE-SU-2026:20222-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed wireshark 4.6.1-1.1 openSUSE-SU-2025:15769-1
openSUSE Leap 16.0 wireshark 4.4.13-160000.1.1 openSUSE-SU-2026:20151-1
openSUSE Leap 15.6 wireshark 4.2.14-150600.18.32.1 SUSE-SU-2025:4440-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 wireshark-cli +1 1:4.4.2-1.amzn2023.0.4 ALAS2023-2026-1450

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 wireshark No fix yet —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 wireshark +2 1:4.4.2-4.0.1.el10_1.1 ELSA-2025-23083
Oracle Linux 9 wireshark +2 1:3.4.10-8.el9_7.1 ELSA-2025-23142

Advisories 24

References