Denial of Service Vulnerability in Wireshark by the Wireshark Foundation
CVE-2025-9817

7.8HIGH

Key Information:

Vendor

Wireshark
Status
Wireshark
Vendor
CVE Published:
3 September 2025

What is CVE-2025-9817?

A vulnerability in the SSH dissector of Wireshark versions 4.4.0 to 4.4.8 could result in a crash, leading to a denial of service during network analysis. This issue highlights a weakness that could be exploited by attackers to disrupt operations by manipulating data packets processed by the affected versions of the software.

Affected Version(s)

Wireshark 4.4.0 < 4.4.9

References

https://www.wireshark.org/security/wnpa-sec-2025-03.html
https://gitlab.com/wireshark/wireshark/-/issues/20642
issue-trackingpermissions-required

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-9817 : Denial of Service Vulnerability in Wireshark by the Wireshark Foundation