Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.1 advisory.

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Wireshark installed on the remote Windows host is prior to 4.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.1 advisory.

  - Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service (CVE-2025-13499)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
276560	Linux Distros Unpatched Vulnerability : CVE-2025-13499	Nessus	Misc.	high
275816	Wireshark 4.6.x < 4.6.1 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	high
275815	Wireshark 4.6.x < 4.6.1 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2025-13499

high

Tenable Plugins

high

high

high