383
VMScore

CVE-2019-9209

Published: 28/02/2019 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

It exists that Wireshark improperly handled certain input. A remote or local attacker could cause Wireshark to crash by injecting malform packets onto the wire or convincing someone to read a malformed packet trace file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

wireshark wireshark

debian debian linux 8.0

debian debian linux 9.0

canonical ubuntu linux 18.04

canonical ubuntu linux 18.10

canonical ubuntu linux 16.04

opensuse leap 42.3

opensuse leap 15.0

opensuse leap 15.1

Vendor Advisories

Debian Bug report logs - #923611 wireshark: CVE-2019-9208 CVE-2019-9209 CVE-2019-9214 Package: src:wireshark; Maintainer for src:wireshark is Balint Reczey <rbalint@ubuntucom>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 2 Mar 2019 19:45:02 UTC Severity: important Tags: security, upstream Foun ...
Wireshark could be made to crash if it received specially crafted network traffic or input files ...
It was discovered that Wireshark, a network traffic analyzer, contained several vulnerabilities in the dissectors for 6LoWPAN, P_MUL, RTSE, ISAKMP, TCAP, ASN1 BER and RPCAP, which could result in denial of service For the stable distribution (stretch), these problems have been fixed in version 267-1~deb9u1 We recommend that you upgrade your wi ...