CVE-2025-11626 - Vulnerability Details - OpenCVE

MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Wireshark	Wireshark

No data.

No data.

References

Link	Providers
https://gitlab.com/wireshark/wireshark/-/issues/20724
https://nvd.nist.gov/vuln/detail/CVE-2025-11626
https://www.cve.org/CVERecord?id=CVE-2025-11626
https://www.wireshark.org/security/wnpa-sec-2025-04.html

History

Tue, 21 Oct 2025 13:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Wireshark Wireshark wireshark
Vendors & Products		Wireshark Wireshark wireshark

Tue, 14 Oct 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 13 Oct 2025 12:15:00 +0000

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2025-11626 https://www.cve.org/CVERecord?id=CVE-2025-11626
Metrics	threat_severity `None`	threat_severity `Moderate`

Fri, 10 Oct 2025 22:45:00 +0000

Type	Values Removed	Values Added
Description		MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service
Title		Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
Weaknesses		CWE-835
References		https://gitlab.com/wireshark/wireshark/-/issues/20724 https://www.wireshark.org/security/wnpa-sec-2025-04.html
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: GitLab

Published: 2025-10-10T22:33:26.431Z

Updated: 2025-10-14T14:16:08.956Z

Reserved: 2025-10-10T22:33:21.568Z

Link: CVE-2025-11626

Vulnrichment

Updated: 2025-10-14T13:43:20.405Z

NVD

Status : Awaiting Analysis

Published: 2025-10-10T23:15:35.207

Modified: 2025-10-14T19:36:59.730

Link: CVE-2025-11626

Redhat

Severity : Moderate

Publid Date: 2025-10-10T22:33:26Z

Links: CVE-2025-11626 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-11626", "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "state": "PUBLISHED", "assignerShortName": "GitLab", "dateReserved": "2025-10-10T22:33:21.568Z", "datePublished": "2025-10-10T22:33:26.431Z", "dateUpdated": "2025-10-14T14:16:08.956Z"}, "containers": {"cna": {"title": "Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark", "descriptions": [{"lang": "en", "value": "MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service"}], "affected": [{"vendor": "Wireshark Foundation", "product": "Wireshark", "versions": [{"version": "4.4.0", "status": "affected", "lessThan": "4.4.10", "versionType": "semver"}, {"version": "4.2.0", "status": "affected", "lessThan": "4.2.14", "versionType": "semver"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')", "cweId": "CWE-835", "type": "CWE"}]}], "references": [{"url": "https://www.wireshark.org/security/wnpa-sec-2025-04.html"}, {"url": "https://gitlab.com/wireshark/wireshark/-/issues/20724", "name": "GitLab Issue #20724", "tags": ["issue-tracking", "permissions-required"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM"}}], "solutions": [{"lang": "en", "value": "Upgrade to version 4.4.10, 4.2.14, or above"}], "providerMetadata": {"orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "shortName": "GitLab", "dateUpdated": "2025-10-10T22:33:26.431Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-14T13:43:17.989074Z", "id": "CVE-2025-11626", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-14T14:16:08.956Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-11626", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-14T13:43:17.989074Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-14T13:43:20.405Z"}}], "cna": {"title": "Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Wireshark Foundation", "product": "Wireshark", "versions": [{"status": "affected", "version": "4.4.0", "lessThan": "4.4.10", "versionType": "semver"}, {"status": "affected", "version": "4.2.0", "lessThan": "4.2.14", "versionType": "semver"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Upgrade to version 4.4.10, 4.2.14, or above"}], "references": [{"url": "https://www.wireshark.org/security/wnpa-sec-2025-04.html"}, {"url": "https://gitlab.com/wireshark/wireshark/-/issues/20724", "name": "GitLab Issue #20724", "tags": ["issue-tracking", "permissions-required"]}], "descriptions": [{"lang": "en", "value": "MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-835", "description": "CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')"}]}], "providerMetadata": {"orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "shortName": "GitLab", "dateUpdated": "2025-10-10T22:33:26.431Z"}}}, "cveMetadata": {"cveId": "CVE-2025-11626", "state": "PUBLISHED", "dateUpdated": "2025-10-14T14:16:08.956Z", "dateReserved": "2025-10-10T22:33:21.568Z", "assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a", "datePublished": "2025-10-10T22:33:26.431Z", "assignerShortName": "GitLab"}, "dataVersion": "5.1"}