Infinite loop in Wireshark - CVE-2025-13946

Vulnerability identifier: #VU119108

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-13946

CWE-ID: CWE-835

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the MEGACO dissector. A remote attacker can send specially crafted data over the network, consume all available system resources and cause denial of service conditions.

Wireshark
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
Desktop Applications Module
Basesystem Module
Server Applications Module
openSUSE Leap
openEuler
Anolis OS
Oracle Solaris
libwiretap7-debuginfo
libwscodecs1
wireshark-devel
libwscodecs1-debuginfo
libwireshark9-debuginfo
wireshark
wireshark-gtk
wireshark-debugsource
libwiretap7
wireshark-debuginfo
wireshark-gtk-debuginfo
libwsutil8
libwsutil8-debuginfo
libwireshark9
wireshark-help
wireshark-ui-qt
libwiretap14
libwsutil15-debuginfo
libwsutil15
libwiretap14-debuginfo
libwireshark17
libwireshark17-debuginfo
wireshark-ui-qt-debuginfo
wireshark-cli
wireshark-doc
wireshark (Debian package)
libwireshark19
libwireshark19-debuginfo
libwsutil17
libwsutil17-debuginfo
libwiretap16
libwiretap16-debuginfo
libvirt-daemon-plugin-sanlock-debuginfo
libvirt-daemon-driver-storage-iscsi-debuginfo
libvirt-daemon-common
libvirt-daemon-driver-interface
libvirt-daemon-qemu
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-storage-scsi-debuginfo
libvirt-client-qemu
libvirt-daemon-driver-storage-logical-debuginfo
libvirt-daemon-driver-nodedev-debuginfo
libvirt-daemon-hooks
libvirt-daemon-driver-storage-disk
libvirt-daemon-plugin-lockd-debuginfo
libvirt-daemon-driver-interface-debuginfo
libvirt-daemon-config-network
libvirt-daemon-driver-network-debuginfo
libvirt-daemon-proxy-debuginfo
libvirt-daemon-driver-network
libvirt-daemon-xen
libvirt-daemon-log
libvirt-daemon-driver-storage
libvirt-daemon-common-debuginfo
libvirt-daemon-driver-qemu-debuginfo
libvirt-client-debuginfo
libvirt-daemon-plugin-sanlock
libvirt-daemon
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-libxl-debuginfo
libvirt-daemon-driver-libxl
libvirt-daemon-driver-storage-rbd-debuginfo
libvirt-doc
libvirt-daemon-driver-storage-mpath-debuginfo
libvirt-libs-debuginfo
libvirt-libs
libvirt-debugsource
libvirt-daemon-driver-storage-core
libvirt-daemon-config-nwfilter
libvirt-daemon-driver-nwfilter-debuginfo
libvirt-daemon-proxy
libvirt-daemon-lock-debuginfo
libvirt-daemon-driver-storage-mpath
libvirt-nss
libvirt-client
libvirt
libvirt-daemon-driver-secret-debuginfo
libvirt-daemon-driver-storage-core-debuginfo
libvirt-daemon-driver-storage-iscsi-direct
libvirt-devel
libvirt-daemon-driver-storage-scsi
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-storage-logical
libvirt-daemon-log-debuginfo
libvirt-daemon-plugin-lockd
libvirt-daemon-driver-storage-iscsi-direct-debuginfo
libvirt-daemon-driver-storage-disk-debuginfo
libvirt-daemon-driver-qemu
libvirt-nss-debuginfo
libvirt-daemon-driver-secret
libvirt-daemon-driver-nodedev
libvirt-daemon-debuginfo
libvirt-daemon-lock

Install updates from vendor's website.

Wireshark - addressed in versions 4.4.12, 4.6.2
libwiretap7-debuginfo - update to 2.4.16-48.66.1
libwscodecs1 - update to 2.4.16-48.66.1
wireshark-devel - addressed in versions 2.4.16-48.66.1, 4.2.14-150600.18.32.1, 4.6.4-150700.21.8.1
libwscodecs1-debuginfo - update to 2.4.16-48.66.1
libwireshark9-debuginfo - update to 2.4.16-48.66.1
wireshark - addressed in versions 2.4.16-48.66.1, 4.2.14-150600.18.32.1, 4.6.4-150700.21.8.1
wireshark-gtk - update to 2.4.16-48.66.1
wireshark-debugsource - addressed in versions 2.4.16-48.66.1, 3.6.24-150000.3.127.1, 4.2.14-150600.18.32.1, 4.6.4-150700.21.8.1
libwiretap7 - update to 2.4.16-48.66.1
wireshark-debuginfo - addressed in versions 2.4.16-48.66.1, 3.6.24-150000.3.127.1, 4.2.14-150600.18.32.1, 4.6.4-150700.21.8.1
wireshark-gtk-debuginfo - update to 2.4.16-48.66.1
libwsutil8 - update to 2.4.16-48.66.1
libwsutil8-debuginfo - update to 2.4.16-48.66.1
libwireshark9 - update to 2.4.16-48.66.1
wireshark - update to 3.6.14-13
wireshark-debuginfo - update to 3.6.14-13
wireshark-debugsource - update to 3.6.14-13
wireshark-devel - update to 3.6.14-13
wireshark-help - update to 3.6.14-13
wireshark-ui-qt - addressed in versions 4.2.14-150600.18.32.1, 4.6.4-150700.21.8.1
libwiretap14 - update to 4.2.14-150600.18.32.1
libwsutil15-debuginfo - update to 4.2.14-150600.18.32.1
libwsutil15 - update to 4.2.14-150600.18.32.1
libwiretap14-debuginfo - update to 4.2.14-150600.18.32.1
libwireshark17 - update to 4.2.14-150600.18.32.1
libwireshark17-debuginfo - update to 4.2.14-150600.18.32.1
wireshark-ui-qt-debuginfo - addressed in versions 4.2.14-150600.18.32.1, 4.6.4-150700.21.8.1
wireshark - update to 4.4.9-4
wireshark-cli - update to 4.4.9-4
wireshark-devel - update to 4.4.9-4
wireshark-doc - update to 4.4.9-4
wireshark (Debian package) - update to 4.4.13-0+deb13u1
libwireshark19 - update to 4.6.4-150700.21.8.1
libwireshark19-debuginfo - update to 4.6.4-150700.21.8.1
libwsutil17 - update to 4.6.4-150700.21.8.1
libwsutil17-debuginfo - update to 4.6.4-150700.21.8.1
libwiretap16 - update to 4.6.4-150700.21.8.1
libwiretap16-debuginfo - update to 4.6.4-150700.21.8.1
libvirt-daemon-plugin-sanlock-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-iscsi-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-common - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-interface - update to 11.0.0-150700.4.19.1
libvirt-daemon-qemu - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-iscsi - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-scsi-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-client-qemu - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-logical-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-nodedev-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-hooks - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-disk - update to 11.0.0-150700.4.19.1
libvirt-daemon-plugin-lockd-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-interface-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-config-network - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-network-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-proxy-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-network - update to 11.0.0-150700.4.19.1
libvirt-daemon-xen - update to 11.0.0-150700.4.19.1
libvirt-daemon-log - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage - update to 11.0.0-150700.4.19.1
libvirt-daemon-common-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-qemu-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-client-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-plugin-sanlock - update to 11.0.0-150700.4.19.1
libvirt-daemon - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-rbd - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-libxl-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-libxl - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-rbd-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-doc - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-mpath-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-libs-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-libs - update to 11.0.0-150700.4.19.1
libvirt-debugsource - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-core - update to 11.0.0-150700.4.19.1
libvirt-daemon-config-nwfilter - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-nwfilter-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-proxy - update to 11.0.0-150700.4.19.1
libvirt-daemon-lock-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-mpath - update to 11.0.0-150700.4.19.1
libvirt-nss - update to 11.0.0-150700.4.19.1
libvirt-client - update to 11.0.0-150700.4.19.1
libvirt - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-secret-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-core-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-iscsi-direct - update to 11.0.0-150700.4.19.1
libvirt-devel - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-scsi - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-nwfilter - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-logical - update to 11.0.0-150700.4.19.1
libvirt-daemon-log-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-plugin-lockd - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-iscsi-direct-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-storage-disk-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-qemu - update to 11.0.0-150700.4.19.1
libvirt-nss-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-secret - update to 11.0.0-150700.4.19.1
libvirt-daemon-driver-nodedev - update to 11.0.0-150700.4.19.1
libvirt-daemon-debuginfo - update to 11.0.0-150700.4.19.1
libvirt-daemon-lock - update to 11.0.0-150700.4.19.1
Oracle Solaris - addressed in versions 11.3 ESU 36.35, 11.4 SRU 89

• https://www.wireshark.org/security/wnpa-sec-2025-08.html
• https://gitlab.com/wireshark/wireshark/-/issues/20884

• Multiple vulnerabilities in Wireshark
• SUSE update for wireshark
• SUSE update for wireshark
• Anolis OS update for wireshark
• Multiple vulnerabilities in Oracle Solaris
• Debian update for wireshark
• SUSE update for wireshark
• openEuler 20.03 LTS SP4 update for wireshark
• SUSE update for wireshark