5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.004 Low
EPSS
Percentile
72.0%
Package : wireshark
Version : 1.12.1+g01b65bf-4+deb8u17
CVE ID : CVE-2019-5716 CVE-2019-5717 CVE-2019-5719
Several issues in wireshark, a network traffic analyzer, have been found.
Dissectors of
CVE-2019-5719
Mateusz Jurczyk found that a missing encryption block in a packet could
crash the ISAKMP dissector.
CVE-2019-5717
It was found that the P_MUL dissector could crash when a malformed
packet contains an illegal Data PDU sequence number of 0. Such a packet
may not be analysed.
CVE-2019-5716
It was found that the 6LoWPAN dissector could crash when a malformed
packet does not contain IPHC information though the header says it
should.
For Debian 8 "Jessie", these problems have been fixed in version
1.12.1+g01b65bf-4+deb8u17.
We recommend that you upgrade your wireshark packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 9 | arm64 | wireshark-qt-dbgsym | < 2.6.7-1~deb9u1 | wireshark-qt-dbgsym_2.6.7-1~deb9u1_arm64.deb |
Debian | 9 | mips | libwireshark11 | < 2.6.7-1~deb9u1 | libwireshark11_2.6.7-1~deb9u1_mips.deb |
Debian | 9 | ppc64el | libwireshark-dev | < 2.6.7-1~deb9u1 | libwireshark-dev_2.6.7-1~deb9u1_ppc64el.deb |
Debian | 9 | amd64 | libwscodecs2-dbgsym | < 2.6.7-1~deb9u1 | libwscodecs2-dbgsym_2.6.7-1~deb9u1_amd64.deb |
Debian | 9 | mipsel | libwsutil9-dbgsym | < 2.6.7-1~deb9u1 | libwsutil9-dbgsym_2.6.7-1~deb9u1_mipsel.deb |
Debian | 8 | i386 | wireshark-common | < 1.12.1+g01b65bf-4+deb8u17 | wireshark-common_1.12.1+g01b65bf-4+deb8u17_i386.deb |
Debian | 9 | armhf | wireshark-gtk | < 2.6.7-1~deb9u1 | wireshark-gtk_2.6.7-1~deb9u1_armhf.deb |
Debian | 9 | i386 | libwiretap-dev | < 2.6.7-1~deb9u1 | libwiretap-dev_2.6.7-1~deb9u1_i386.deb |
Debian | 9 | mips | libwsutil9 | < 2.6.7-1~deb9u1 | libwsutil9_2.6.7-1~deb9u1_mips.deb |
Debian | 8 | i386 | tshark | < 1.12.1+g01b65bf-4+deb8u17 | tshark_1.12.1+g01b65bf-4+deb8u17_i386.deb |
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.004 Low
EPSS
Percentile
72.0%