CVE-2019-5719
CVE-2019-5719
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block.
CVSS 5.5 · Medium · EPSS 0.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
wireshark Debian:12
- Affected ranges
- ECOSYSTEM: < 2.6.6-1
Update to 2.6.6-1
wireshark Debian:13
- Affected ranges
- ECOSYSTEM: < 2.6.6-1
Update to 2.6.6-1
wireshark Debian:14
- Affected ranges
- ECOSYSTEM: < 2.6.6-1
Update to 2.6.6-1
wireshark Ubuntu:14.04:LTS
- Versions
- 1.10.2-1
- 1.10.3-1
- 1.10.5-1ubuntu1
- 1.10.5-2
- 1.10.6-1
- 1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1
- 2.6.3-1~ubuntu14.04.1
- 2.6.4-2~ubuntu14.04.1
- 2.6.5-1~ubuntu14.04.1
- Affected ranges
- ECOSYSTEM: < 2.6.6-1~ubuntu14.04.0
Update to 2.6.6-1~ubuntu14.04.0
wireshark Ubuntu:16.04:LTS
- Versions
- 1.12.7+g7fc8978-1
- 1.12.8+g5b6e543-2
- 2.0.1+g59ea380-3build1
- 2.0.2+ga16e22e-1
- 2.2.6+g32dac6a-2ubuntu0.16.04
- 2.6.3-1~ubuntu16.04.1
- 2.6.4-2~ubuntu16.04.0
- 2.6.5-1~ubuntu16.04.0
- Affected ranges
- ECOSYSTEM: < 2.6.6-1~ubuntu16.04.0
Update to 2.6.6-1~ubuntu16.04.0
wireshark Ubuntu:18.04:LTS
- Versions
- 2.4.2-1
- 2.4.3-1
- 2.4.4-1
- 2.4.5-1
- 2.6.3-1~ubuntu18.04.1
- 2.6.4-2~ubuntu18.04.0
- 2.6.5-1~ubuntu18.04.0
- Affected ranges
- ECOSYSTEM: < 2.6.6-1~ubuntu18.04.0
Update to 2.6.6-1~ubuntu18.04.0
Original sources
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15374
- https://lists.debian.org/debian-lts-announce/2019/01/msg00022.html
- https://www.wireshark.org/security/wnpa-sec-2019-04.html
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b5b02f2a9b8772d8814096f86c60a32889d61f2c
- https://www.debian.org/security/2019/dsa-4416
- https://seclists.org/bugtraq/2019/Mar/35
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
- https://nvd.nist.gov/vuln/detail/CVE-2019-5719