This vulnerability, identified as CWE-606, occurs in Wireshark's Microsoft Network Monitor file parser in versions >=4.4.0 <4.4.19 and >=4.6.0 <4.6.9. The flaw is due to unchecked input used as a loop condition, which can cause the application to enter a large loop, resulting in denial of service. The CVSS 3.1 base score is 4.7, indicating medium severity, with attack vector local, high attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, and high availability impact.

Successful exploitation can cause denial of service by making Wireshark consume excessive resources or become unresponsive when processing crafted Microsoft Network Monitor files. There is no impact on confidentiality or integrity.

No explicit patch or remediation information is provided. Patch status is not yet confirmed — check the Wireshark vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening untrusted Microsoft Network Monitor files and consider using alternative tools or updated versions once released.