CVE-2019-13619

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash

published July 17, 2019

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06079 · 93.4th percentile
Published
2019-07-17T19:18Z
EPSS history
Timeline
  • 17 JUL 19:18Z
    In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash
    cvelistv5