CVE-2019-9209

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash

published February 28, 2019

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01398 · 72.2th percentile
Published
2019-02-28T04:00Z
EPSS history
Timeline
  • 28 FEB 04:00Z
    In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash
    cvelistv5