CVE-2025-5601

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120CWE-787

Affected software

VendorProductVersions
Wireshark FoundationWireshark>= 4.4.0, < 4.4.7; >= 4.2.0, < 4.2.13

References

Timeline

Published
Jun 4, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-560157.5In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint.CVE-2025-560186.1SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in Category Management via the CVE-2025-560196.5An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to coCVE-2025-56029.8A vulnerability, which was classified as critical, was found in Campcodes Hospital Management System 1.0. Affected is an unknown function ofCVE-2025-56039.8A vulnerability has been found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an CVE-2025-56049.8A vulnerability was found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown funCVE-2025-56055.3An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the consCVE-2025-56069.8A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetIptv oCVE-2025-56078.8A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPUserList of tCVE-2025-560749.8A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management SysteCVE-2025-560755.4A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System vCVE-2025-560778.8OS Command Injection vulnerability in Ruijie RG-RAP2200(E) 247 2200 allowing attackers to execute arbitrary commands via a crafted POST requ
CVE-2025-5601: Medium severity, CVSS 6.5 | Vulnix