CVE-2025-1492
wireshark: Uncontrolled Recursion in Wireshark
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 20, 2025
Updated · August 6, 2026
Description
A flaw was found in Wireshark. Bundle Protocol and CBOR dissector crashes in Wireshark allow denial of service via packet injection or crafted capture file.
Statement
No any Red Hat offerings are impacted by this vulnerability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is available for this issue other than updating the affected package to the version containing the fix. However, by disabling BP and avoiding opening capture files from non trusted sources reduces the risk of triggering this vulnerability and crashing Wireshark.
CVSS / CWE
CVSS 3.1 · 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-674 · Uncontrolled Recursion