Index-out-of-bounds Vulnerability in Wireshark Package
Summary
OSV-2025-371: Index-out-of-bounds in tcp_analyze_sequence_number. Affects wireshark versions >= c6f73d5fbcf94a9d6211b046ec8b8991e483fc11, < 76c83894a641ba15e513564bed6c42fb2e59dc02. Fixed in 76c83894a641ba15e513564bed6c42fb2e59dc02. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Wireshark is a widely-used open-source network protocol analyzer that allows users to capture and interactively browse the traffic running on a computer network. It is essential for network troubleshooting, analysis, software and communications protocol development, and education. However, like any software, it is susceptible to vulnerabilities that can compromise its functionality and security.
Vulnerability Detail
The vulnerability identified as OSV-2025-371 is an index-out-of-bounds error occurring in the tcp_analyze_sequence_number function within Wireshark. This issue arises when the software attempts to access an array element that is outside its valid range, potentially leading to crashes or unexpected behavior. The vulnerability was introduced in a specific commit and can be exploited under certain conditions, making it crucial for users to address it promptly to avoid disruptions in network analysis.
How To Fix
Minimum fixed version
76c83894a641ba15e513564bed6c42fb2e59dc02
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as possible to mitigate risks.
Conclusion
The index-out-of-bounds vulnerability in Wireshark poses a risk to users by potentially causing crashes during network analysis. It is essential to update to the patched version to ensure continued functionality and security. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for wireshark →
FAQ
An index-out-of-bounds vulnerability occurs when a program attempts to access an array element that is outside the bounds of the array, which can lead to crashes or unintended behavior.
You can check if your version of Wireshark is affected by comparing your installed version with the fixed version mentioned in the vulnerability report.
Exploiting this vulnerability can lead to crashes in Wireshark, which may disrupt network analysis and troubleshooting activities.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
References
Related vulnerabilities
Recent vulnerabilities recorded for wireshark.
