CVE-2019-19553
05.12.2019, 01:15
In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection.Enginsight
| Vendor | Product | Version |
|---|---|---|
| wireshark | wireshark | 2.6.0 ≤ 𝑥 ≤ 2.6.12 |
| wireshark | wireshark | 3.0.0 ≤ 𝑥 ≤ 3.0.6 |
| opensuse | leap | 15.1 |
| oracle | zfs_storage_appliance | 8.8 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References