Opened 10 months ago

Closed 10 months ago

Last modified 8 months ago

#22473 closed enhancement (fixed)

wireshark-4.6.2 (Security issue)

Reported by: Bruce Dubbs Owned by: Douglas R. Reno
Priority: elevated Milestone: 13.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New point version.

Change History (7)

comment:1 by Bruce Dubbs, 10 months ago

Priority: normal → elevated
Summary: wireshark-4.6.2 → wireshark-4.6.2 (Security issue)

Wireshark 4.6.2 Release Notes

Bug Fixes

This release fixes an API/ABI change that was introduced in Wireshark 4.6.1, which caused a compatibility issue with plugins built for Wireshark 4.6.0.

The following vulnerabilities have been fixed:

  • wnpa-sec-2025-07 HTTP3 dissector crash.
  • wnpa-sec-2025-08 MEGACO dissector infinite loop.

The following bugs have been fixed:

  • ws_base32_decode should be named *_encode ?
  • Omnipeek files not working in 4.6.1.
  • Stack buffer overflow in wiretap/ber.c (ber_open)
  • Plugins incompatibility between 4.6.0 & 4.6.1.
  • Fuzz job crash: fuzz-2025-11-30-12266121180.pcap.

New and Updated Features

  • The Windows installers now ship with the Visual C++ Redistributable version 14.44.35112. They previously shipped with 14.40.33807.

comment:2 by Bruce Dubbs, 10 months ago

Owner: changed from blfs-book to Bruce Dubbs
Status: new → assigned

comment:3 by Bruce Dubbs, 10 months ago 

Name: HTTP3 dissector crash
Docid: wnpa-sec-2025-07
Date: December 3, 2025
Affected versions: 4.6.0 to 4.6.1
Fixed versions: 4.6.2
Wireshark issue 20860.
CVE-2025-13945.

Name: MEGACO dissector infinite loop
Docid: wnpa-sec-2025-08
Date: December 3, 2025
Affected versions: 4.6.0 to 4.6.1, 4.4.0 to 4.4.11
Fixed versions: 4.6.2, 4.4.12
Wireshark issue 20884.
CVE-2025-13946.

comment:4 by Bruce Dubbs, 10 months ago

Owner: changed from Bruce Dubbs to Douglas R. Reno
Status: assigned → new

Fixed at commits 

2f2db1cbfa Update to wireshark-4.6.2 (Security issue).
new 7cf63d9041 Update to httpd-2.4.66 (Security issue).

Leaving open for security advisories.

comment:5 by Douglas R. Reno, 10 months ago

Status: new → assigned

comment:6 by Douglas R. Reno, 10 months ago

Resolution: → fixed
Status: assigned → closed

SA-12.4-048 issued

comment:7 by Bruce Dubbs, 8 months ago

Milestone: 12.5 → 13.0

Milestone renamed

Note: See TracTickets for help on using tickets.