VYPR
High severity7.5NVD Advisory· Published May 23, 2019· Updated Jun 17, 2026

CVE-2019-12295

CVE-2019-12295

Description

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*range: >=2.4.0,<=2.4.14
    • (no CPE)range: 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*+ 2 more
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • Wireshark/Wiresharkdescription

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.