high7.5
CVE-2019-9208
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash.
Impact
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wireshark | Wireshark | from 2.4.0 through 2.4.12 from 2.6.0 through 2.6.6 |
| Debian | Debian Linux | Version 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
- http://www.securityfocus.com/bid/107203
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2
- https://seclists.org/bugtraq/2019/Mar/35
- https://usn.ubuntu.com/3986-1/
- https://www.debian.org/security/2019/dsa-4416
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.wireshark.org/security/wnpa-sec-2019-07.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
- http://www.securityfocus.com/bid/107203
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2
- https://seclists.org/bugtraq/2019/Mar/35
- https://usn.ubuntu.com/3986-1/
- https://www.debian.org/security/2019/dsa-4416
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.wireshark.org/security/wnpa-sec-2019-07.html