Input validation error in Wireshark - CVE-2025-13945

Vulnerability identifier: #VU119107

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-13945

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in HTTP3 dissector when decrypting traffic using a keylog file or loading a capture file that contains decryption secrets. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Wireshark
Debian Linux
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Basesystem Module
Desktop Applications Module
Server Applications Module
Oracle Solaris
wireshark (Debian package)
wireshark-ui-qt-debuginfo
libwsutil17-debuginfo
wireshark-debugsource
libwiretap16-debuginfo
wireshark
libwiretap16
wireshark-ui-qt
libwireshark19
libwsutil17
wireshark-devel
wireshark-debuginfo
libwireshark19-debuginfo
libvirt-daemon-driver-storage-scsi-debuginfo
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-interface
libvirt-client-qemu
libvirt-daemon-qemu
libvirt-daemon-driver-storage-iscsi-debuginfo
libvirt-daemon-common
libvirt-client-debuginfo
libvirt-daemon-driver-storage-logical-debuginfo
libvirt-daemon-driver-nodedev-debuginfo
libvirt-daemon-plugin-sanlock-debuginfo
libvirt-daemon-driver-storage-disk
libvirt-daemon-plugin-lockd-debuginfo
libvirt-daemon-driver-interface-debuginfo
libvirt-daemon-config-network
libvirt-daemon-driver-network-debuginfo
libvirt-daemon-proxy-debuginfo
libvirt-daemon-driver-network
libvirt-daemon-hooks
libvirt-daemon-log
libvirt-daemon-driver-storage
libvirt-daemon-common-debuginfo
libvirt-daemon-driver-qemu-debuginfo
libvirt-daemon-plugin-lockd
libvirt-daemon-plugin-sanlock
libvirt-daemon
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-storage-rbd-debuginfo
libvirt-doc
libvirt-daemon-xen
libvirt-daemon-driver-libxl-debuginfo
libvirt-daemon-driver-libxl
libvirt-daemon-driver-storage-mpath-debuginfo
libvirt-libs-debuginfo
libvirt-libs
libvirt-debugsource
libvirt-daemon-driver-storage-core
libvirt-daemon-config-nwfilter
libvirt-daemon-driver-nwfilter-debuginfo
libvirt-daemon-proxy
libvirt-daemon-lock-debuginfo
libvirt-daemon-driver-storage-mpath
libvirt-nss
libvirt-client
libvirt
libvirt-daemon-driver-secret-debuginfo
libvirt-daemon-driver-storage-core-debuginfo
libvirt-daemon-lock
libvirt-daemon-driver-storage-iscsi-direct
libvirt-daemon-debuginfo
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-secret
libvirt-nss-debuginfo
libvirt-daemon-driver-qemu
libvirt-daemon-driver-storage-disk-debuginfo
libvirt-daemon-driver-storage-iscsi-direct-debuginfo
libvirt-daemon-log-debuginfo
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-storage-scsi
libvirt-devel

Install updates from vendor's website.

Wireshark - update to 4.6.2
wireshark (Debian package) - update to 4.4.13-0+deb13u1
wireshark-ui-qt-debuginfo - update to 4.6.4-150700.21.8.1
libwsutil17-debuginfo - update to 4.6.4-150700.21.8.1
wireshark-debugsource - update to 4.6.4-150700.21.8.1
libwiretap16-debuginfo - update to 4.6.4-150700.21.8.1
wireshark - update to 4.6.4-150700.21.8.1
libwiretap16 - update to 4.6.4-150700.21.8.1
wireshark-ui-qt - update to 4.6.4-150700.21.8.1
libwireshark19 - update to 4.6.4-150700.21.8.1
libwsutil17 - update to 4.6.4-150700.21.8.1
wireshark-devel - update to 4.6.4-150700.21.8.1
wireshark-debuginfo - update to 4.6.4-150700.21.8.1
libwireshark19-debuginfo - update to 4.6.4-150700.21.8.1
libvirt-daemon-driver-storage-scsi-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-iscsi - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-interface - update to 11.0.0-150700.4.19.1
libvirt-client-qemu - update to 11.0.0-150700.4.19.1
libvirt-daemon-qemu - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-iscsi-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-common - update to 11.0.0-150700.4.19.1
libvirt-client-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-logical-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-nodedev-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-plugin-sanlock-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-disk - update to 11.0.0-150700.4.19.1
libvirt-daemon-plugin-lockd-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-interface-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-config-network - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-network-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-proxy-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-network - update to 11.0.0-150700.4.19.1
libvirt-daemon-hooks - update to 11.0.0-150700.4.19.1
libvirt-daemon-log - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage - update to 11.0.0-150700.4.19.1
libvirt-daemon-common-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-qemu-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-plugin-lockd - update to 11.0.0-150700.4.19.1
libvirt-daemon-plugin-sanlock - update to 11.0.0-150700.4.19.1
libvirt-daemon - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-rbd - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-rbd-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-doc - update to 11.0.0-150700.4.19.1
libvirt-daemon-xen - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-libxl-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-libxl - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-mpath-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-libs-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-libs - update to 11.0.0-150700.4.19.1
libvirt-debugsource - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-core - update to 11.0.0-150700.4.19.1
libvirt-daemon-config-nwfilter - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-nwfilter-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-proxy - update to 11.0.0-150700.4.19.1
libvirt-daemon-lock-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-mpath - update to 11.0.0-150700.4.19.1
libvirt-nss - update to 11.0.0-150700.4.19.1
libvirt-client - update to 11.0.0-150700.4.19.1
libvirt - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-secret-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-core-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-lock - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-iscsi-direct - update to 11.0.0-150700.4.19.1
libvirt-daemon-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-nodedev - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-secret - update to 11.0.0-150700.4.19.1
libvirt-nss-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-qemu - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-disk-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-iscsi-direct-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-log-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-logical - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-nwfilter - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-scsi - update to 11.0.0-150700.4.19.1
libvirt-devel - update to 11.0.0-150700.4.19.1
Oracle Solaris - addressed in versions 11.3 ESU 36.35, 11.4 SRU 89

• https://www.wireshark.org/security/wnpa-sec-2025-07.html
• https://gitlab.com/wireshark/wireshark/-/issues/20860

• Multiple vulnerabilities in Wireshark
• Multiple vulnerabilities in Oracle Solaris
• Debian update for wireshark
• SUSE update for wireshark