EUVD-2025-16867CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
5DescriptionNVD
Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file
AnalysisAI
A denial of service vulnerability in Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 (CVSS 7.8) that allows denial of service. Risk factors: public PoC available.
Technical ContextAI
CWE-120 (Classic Buffer Overflow). CVSS 7.8 indicates high severity. Affects Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12.
RemediationAI
Monitor vendor channels for patch availability. Consider network segmentation to limit exposure if patching is delayed.
More from same product – last 7 days
Command injection in the shell-quote npm package allows attackers who can influence object-token inputs to inject arbitr
Heap buffer overflow in NGINX Plus and NGINX Open Source ngx_http_rewrite_module allows unauthenticated remote attackers
Vendor StatusVendor
Ubuntu
Priority: Medium| Release | Status | Version |
|---|---|---|
| trusty | needs-triage | - |
| xenial | needs-triage | - |
| bionic | needs-triage | - |
| focal | needs-triage | - |
| jammy | needs-triage | - |
| noble | needs-triage | - |
| upstream | needs-triage | - |
| oracular | ignored | end of life, was needs-triage |
| questing | needs-triage | - |
| plucky | ignored | end of life, was needs-triage |
Debian
Bug #1107515| Release | Status | Fixed Version | Urgency |
|---|---|---|---|
| bullseye | fixed | 3.4.16-0+deb11u2 | - |
| bullseye (security) | fixed | 3.4.16-0+deb11u2 | - |
| bookworm | vulnerable | 4.0.17-0+deb12u1 | - |
| bookworm (security) | vulnerable | 4.0.11-1~deb12u1 | - |
| trixie | fixed | 4.4.14-0+deb13u1 | - |
| trixie (security) | fixed | 4.4.13-0+deb13u1 | - |
| forky, sid | fixed | 4.6.4-1 | - |
| experimental | fixed | 4.4.7-0exp1 | - |
| (unstable) | fixed | 4.4.7-1 | - |
Share
External POC / Exploit Code
Leaving vuln.today