Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0432 advisory.

    The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running     on a computer network.

    Security Fix(es):

    * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0452 advisory.

    The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running     on a computer network.

    Security Fix(es):

    * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0483 advisory.

    The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running     on a computer network.

    Security Fix(es):

    * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0454 advisory.

    The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running     on a computer network.

    Security Fix(es):

    * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:0433 advisory.

    The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running     on a computer network.

    Security Fix(es):

    * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11555:02 advisory.

    * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4440-1 advisory.

    - CVE-2025-13499: Fixed Kafka dissector crash due to malformed packet (bsc#1254108).
    - CVE-2025-13946: Fixed MEGACO dissector infinite loop that allows denial of service (bsc#1254472).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:23142 advisory.

    * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:23083 advisory.

    * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:23142 advisory.

    * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:23083 advisory.

    * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-23142 advisory.

    [1:3.4.10-8.1]
    - Resolves: RHEL-130438 - Access of Uninitialized Pointer in Wireshark

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f810869906 advisory.

    New version 4.6.1     Beware of the move of files from /usr/lib64/wireshark/extcap/ to /usr/libexec/wireshark/extcap. Any custom     user scripts should be moved too.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-0e41e63705 advisory.

    New version 4.6.1. Beware of the move of files from /usr/lib64/wireshark/extcap/ to     /usr/libexec/wireshark/extcap. Any custom user scripts should be moved too.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:23142 advisory.

    The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running     on a computer network.

    Security Fix(es):

    * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-23083 advisory.

    [4.4.2-4.0.1.1]
    - Fix post script to not fail during initial installation [Orabug: 37565359]

    [1:4.4.2-4.1]
    - Resolves: RHEL-130425 - Access of Uninitialized Pointer in Wireshark

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:23083 advisory.

    The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running     on a computer network.

    Security Fix(es):

    * wireshark: Access of Uninitialized Pointer in Wireshark (CVE-2025-13499)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.2 advisory.

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service     (CVE-2025-13946)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.2 advisory.

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

  - MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service     (CVE-2025-13946)

  - HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service (CVE-2025-13945)

  - BPv7 dissector crash in Wireshark 4.6.0 allows denial of service (CVE-2025-13674)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the wireshark package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.1 advisory.

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.1 advisory.

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
283565	RHEL 9 : wireshark (RHSA-2026:0432)	Nessus	Red Hat Local Security Checks	medium
283522	RHEL 9 : wireshark (RHSA-2026:0452)	Nessus	Red Hat Local Security Checks	medium
283512	RHEL 10 : wireshark (RHSA-2026:0483)	Nessus	Red Hat Local Security Checks	medium
283508	RHEL 9 : wireshark (RHSA-2026:0454)	Nessus	Red Hat Local Security Checks	medium
283495	RHEL 9 : wireshark (RHSA-2026:0433)	Nessus	Red Hat Local Security Checks	medium
283308	MiracleLinux 9 : wireshark-3.4.10-8.el9_7.1 (AXSA:2025-11555:02)	Nessus	Miracle Linux Local Security Checks	high
279061	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wireshark (SUSE-SU-2025:4440-1)	Nessus	SuSE Local Security Checks	medium
278617	RockyLinux 9 : wireshark (RLSA-2025:23142)	Nessus	Rocky Linux Local Security Checks	medium
278575	AlmaLinux 10 : wireshark (ALSA-2025:23083)	Nessus	Alma Linux Local Security Checks	medium
278556	AlmaLinux 9 : wireshark (ALSA-2025:23142)	Nessus	Alma Linux Local Security Checks	medium
278515	RockyLinux 10 : wireshark (RLSA-2025:23083)	Nessus	Rocky Linux Local Security Checks	medium
278497	Oracle Linux 9 : wireshark (ELSA-2025-23142)	Nessus	Oracle Linux Local Security Checks	medium
278402	Fedora 42 : wireshark (2025-f810869906)	Nessus	Fedora Local Security Checks	medium
278400	Fedora 43 : wireshark (2025-0e41e63705)	Nessus	Fedora Local Security Checks	medium
278388	RHEL 9 : wireshark (RHSA-2025:23142)	Nessus	Red Hat Local Security Checks	medium
278175	Oracle Linux 10 : wireshark (ELSA-2025-23083)	Nessus	Oracle Linux Local Security Checks	medium
278150	RHEL 10 : wireshark (RHSA-2025:23083)	Nessus	Red Hat Local Security Checks	medium
277287	Wireshark 4.6.x < 4.6.2 Multiple Vulnerabilities	Nessus	Windows	medium
277286	Wireshark 4.6.x < 4.6.2 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	medium
277030	Photon OS 5.0: Wireshark PHSA-2025-5.0-0695	Nessus	PhotonOS Local Security Checks	high
277027	Photon OS 4.0: Wireshark PHSA-2025-4.0-0917	Nessus	PhotonOS Local Security Checks	high
276560	Linux Distros Unpatched Vulnerability : CVE-2025-13499	Nessus	Misc.	medium
275816	Wireshark 4.6.x < 4.6.1 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	high
275815	Wireshark 4.6.x < 4.6.1 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2025-13499

medium

Tenable Plugins

medium

medium

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high

medium

high

high