CVE-2025-1492

Published Feb 20, 2025

Last updated 3 days ago

Overview

Description: Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file
Source: cve@gitlab.com
NVD status: Received

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

cve@gitlab.com: CWE-674

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

🚨 CVE-2025-1492 🔴 HIGH (7.8) 🏢 Wireshark Foundation - Wireshark 🏗️ 4.4.0 🔗 https://t.co/MeRWJnLOCm 🔗 https://t.co/nZv0wFBbqd #CyberCron #VulnAlert @WiresharkNews https://t.co/PbSiJL8AKl
@cybercronai
20 Feb 2025
18 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

References