High severity7.5NVD Advisory· Published May 23, 2019· Updated Jun 17, 2026
CVE-2019-12295
CVE-2019-12295
Description
In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
- Wireshark/Wiresharkdescription
Patches
Vulnerability mechanics
References
8- bugs.wireshark.org/bugzilla/show_bug.cginvdIssue TrackingPatchVendor Advisory
- lists.debian.org/debian-lts-announce/2020/10/msg00036.htmlnvdMailing ListThird Party Advisory
- support.f5.com/csp/article/K06725231nvdThird Party Advisory
- usn.ubuntu.com/4133-1/nvdThird Party Advisory
- www.wireshark.org/security/wnpa-sec-2019-19.htmlnvdVendor Advisory
- www.securityfocus.com/bid/108464nvdBroken Link
- code.wireshark.org/review/gitwebnvd
- support.f5.com/csp/article/K06725231nvd
News mentions
0No linked articles in our index yet.