OESA-2025-1660

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1660

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2025-1660.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2025-1660

Upstream

CVE-2024-11596

CVE-2025-5601

Published

2025-06-20T13:26:45Z

Modified

2025-08-12T05:41:07.985008Z

Summary

wireshark security update

Details

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols.

Security Fix(es):

A vulnerability, which was classified as problematic, has been found in Wireshark up to 4.2.8/4.4.1 (Packet Analyzer Software).Using CWE to declare the problem leads to CWE-126. The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.Impacted is availability.Upgrading to version 4.2.9 or 4.4.2 eliminates this vulnerability.(CVE-2024-11596)

Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file(CVE-2025-5601)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:24.03-LTS / wireshark

Package

Name: wireshark
Purl: pkg:rpm/openEuler/wireshark&distro=openEuler-24.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.4.7-2.oe2403

Ecosystem specific

{
    "aarch64": [
        "wireshark-4.4.7-2.oe2403.aarch64.rpm",
        "wireshark-debuginfo-4.4.7-2.oe2403.aarch64.rpm",
        "wireshark-debugsource-4.4.7-2.oe2403.aarch64.rpm",
        "wireshark-devel-4.4.7-2.oe2403.aarch64.rpm"
    ],
    "noarch": [
        "wireshark-help-4.4.7-2.oe2403.noarch.rpm"
    ],
    "x86_64": [
        "wireshark-4.4.7-2.oe2403.x86_64.rpm",
        "wireshark-debuginfo-4.4.7-2.oe2403.x86_64.rpm",
        "wireshark-debugsource-4.4.7-2.oe2403.x86_64.rpm",
        "wireshark-devel-4.4.7-2.oe2403.x86_64.rpm"
    ],
    "src": [
        "wireshark-4.4.7-2.oe2403.src.rpm"
    ]
}