CVE-2025-34458
Description
A flaw was found in Dire Wolf. A remote, unauthenticated attacker can exploit a reachable assertion vulnerability in the APRS MIC-E decoder. By sending a specially crafted AX.25 frame that contains a MIC-E message with an empty or truncated comment field, the attacker can cause the application to terminate. This leads to a Denial of Service (DoS), making the system unavailable.
Statement
This vulnerability is rated Important because a remote, unauthenticated attacker can cause a denial of service in Dire Wolf by sending specially crafted AX.25 frames with malformed APRS MIC-E messages. This flaw affects Dire Wolf as shipped in Fedora 42 and Fedora 43.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
