Moderate Security Update for Wireshark: NULL Pointer Dereference Vulnerability
Summary
ALSA-2026:1714: Moderate: wireshark security update. Affects wireshark versions < 1:4.4.2-4.el10_1.2. Fixed in 1:4.4.2-4.el10_1.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is a widely-used network protocol analyzer that enables users to capture and interactively browse the traffic running on a computer network. It is essential for network troubleshooting, analysis, software and communications protocol development, and education. The tool supports a wide range of protocols and media types, making it a versatile choice for network professionals. However, like any software, it is susceptible to vulnerabilities that can compromise its functionality and security.
Vulnerability Detail
The vulnerability identified as CVE-2025-9817 is a NULL Pointer Dereference in Wireshark. This issue arises when the software attempts to access a memory location that has not been initialized, potentially leading to application crashes or unexpected behavior. The ramifications of this vulnerability can include denial of service, where the application becomes unresponsive, and in some cases, it may expose sensitive data or allow for arbitrary code execution if exploited by an attacker.
How To Fix
Minimum fixed version
1:4.4.2-4.el10_1.2
This is the first release that contains the fix.
sudo dnf update wiresharkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using features of Wireshark that may trigger the NULL Pointer Dereference until the software is updated. However, the best course of action is to apply the patch as soon as possible.
Conclusion
The NULL Pointer Dereference vulnerability in Wireshark poses a moderate risk to users, potentially leading to application crashes and security issues. It is crucial for users to update to the patched version to mitigate these risks. Regular monitoring for vulnerabilities using tools like Vulert can help maintain software security.
See every vulnerability recorded for wireshark →
FAQ
A NULL Pointer Dereference occurs when a program attempts to access or modify memory at a location that has not been allocated, leading to potential crashes or unpredictable behavior.
You can check your version of Wireshark by running 'wireshark --version' in the terminal. If it is below 1:4.4.2-4.el10_1.2, it is vulnerable.
If immediate updates are not possible, refrain from using features that may trigger the vulnerability and monitor for updates regularly.
Yes, you can use tools like Vulert, which monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
For detailed information about CVE-2025-9817, refer to the CVE page linked in the security advisory or check the official Wireshark documentation.
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
