Wireshark versions 4.6.0 through 4.6.6 and 4.4.0 through 4.4.16 have multiple protocol dissector infinite loop vulnerabilities. These infinite loops can be exploited to cause denial of service by making the application enter an unresponsive state. The vulnerability affects numerous Ubuntu package versions of Wireshark as listed. The CVSS 3.1 vector indicates local attack vector, low complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, and high impact on availability.

Successful exploitation results in denial of service by causing Wireshark to enter infinite loops, leading to application hang or crash. There is no impact on confidentiality or integrity. The attack requires local access and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should monitor official Ubuntu and Wireshark advisories for updates and apply patches once available. Until patched, avoid opening untrusted capture files or network traffic in affected Wireshark versions.