CVE-2019-13619: Buffer Overflow
Published Jul 17, 2019
·Updated
In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.
Affected Software
12 affected componentsFixes available
Wireshark Wireshark>=2.4.0<=2.4.15
Wireshark Wireshark>=2.6.0<=2.6.9
Wireshark Wireshark>=3.0.0<=3.0.2
Fedoraproject Fedora=29
Fedoraproject Fedora=30
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=19.04
Debian Debian Linux=9.0
openSUSE Leap=15.0
openSUSE Leap=15.1
debian/wireshark
3.4.10-0+deb11u13.4.16-0+deb11u24.0.17-0+deb12u14.0.11-1~deb12u14.4.7-14.4.13-0+deb13u14.6.3-1
Remediation
Event History
Jul 17, 2019
CVE Published
via MITRE·07:18 PM
Data Sourced
via MITRE·07:18 PM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 20, 2026
Data Sourced
via Ubuntu·10:38 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·10:38 PM
Description
Data Sourced
via Debian·10:39 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-13619?
The severity of CVE-2019-13619 is classified as high due to the potential for crashes in Wireshark.
2
How do I fix CVE-2019-13619?
To fix CVE-2019-13619, update to Wireshark version 3.4.10 or later, or any patched version from the relevant distributions.
3
Which Wireshark versions are affected by CVE-2019-13619?
Wireshark versions 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15 are affected by CVE-2019-13619.
4
What impact does CVE-2019-13619 have on users?
CVE-2019-13619 can lead to crashes of the Wireshark application, affecting user experience and potential data loss.
5
Is CVE-2019-13619 related to ASN.1 BER dissectors?
Yes, CVE-2019-13619 specifically affects the ASN.1 BER dissector and related dissectors in Wireshark.