CVE-2019-12295
Fixed in a distro release EPSS 4%
In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.
Products: wireshark, debian_linux, canonical ubuntu_linux, f5 big-ip_access_policy_manager, f5 big-ip_advanced_firewall_manager, f5 big-ip_analytics, f5 big-ip_application_acceleration_manager, f5 big-ip_application_security_manager, f5 big-ip_domain_name_system, f5 big-ip_edge_gateway, f5 big-ip_fraud_protection_service, f5 big-ip_global_traffic_manager, f5 big-ip_link_controller, f5 big-ip_local_traffic_manager, f5 big-ip_policy_enforcement_manager, f5 big-ip_webaccelerator
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | wireshark | 2.6.8-1.1 |
| Debian 13 | wireshark | 2.6.8-1.1 |
| Debian 14 | wireshark | 2.6.8-1.1 |
| Debian 9 | wireshark | 2.6.8-1.1~deb9u1 |
| Debian 9 | wireshark | 2.6.20-0+deb9u1 |
| Ubuntu 16.04 LTS | wireshark | 2.6.10-1~ubuntu16.04.0 |
| Ubuntu 18.04 LTS | wireshark | 2.6.10-1~ubuntu18.04.0 |
| Ubuntu Pro 14.04 LTS | wireshark | 2.6.10-1~ubuntu14.04.0~esm1 |