In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
No history.
Information
Published : 2019-05-23 12:29
Updated : 2024-11-21 04:22
NVD link : CVE-2019-12295
Mitre link : CVE-2019-12295
CVE.ORG link : CVE-2019-12295
JSON object : View
Products Affected
f5
- big-ip_webaccelerator
- big-ip_application_security_manager
- big-ip_policy_enforcement_manager
- big-ip_local_traffic_manager
- big-ip_access_policy_manager
- big-ip_advanced_firewall_manager
- big-ip_application_acceleration_manager
- big-ip_domain_name_system
- big-ip_fraud_protection_service
- big-ip_analytics
- big-ip_link_controller
- big-ip_global_traffic_manager
- big-ip_edge_gateway
debian
- debian_linux
wireshark
- wireshark
canonical
- ubuntu_linux
CWE
CWE-674
Uncontrolled Recursion