CVE-2019-5719: Medium severity wireshark vulnerability
Published Jan 8, 2019
·Updated
In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the ISAKMP dissector could crash. This was addressed in epan/dissectors/packet-isakmp.c by properly handling the case of a missing decryption data block.
Affected Software
5 affected componentsFixes available
debian/wireshark
2.6.20-0+deb10u42.6.20-0+deb10u73.4.10-0+deb11u14.0.11-1~deb12u14.2.0-1
Wireshark Wireshark>=2.4.0<=2.4.11
Wireshark Wireshark>=2.6.0<=2.6.5
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Event History
Jan 8, 2019
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
via NVD·11:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-5719?
The severity of CVE-2019-5719 has not been explicitly rated, but it can lead to crashes in the Wireshark application.
2
How do I fix CVE-2019-5719?
To fix CVE-2019-5719, upgrade to Wireshark versions 2.6.20 or higher, 3.4.10 or higher, or 4.0.11 or higher.
3
Which versions of Wireshark are affected by CVE-2019-5719?
Wireshark versions 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11 are affected by CVE-2019-5719.
4
What component of Wireshark is affected by CVE-2019-5719?
The ISAKMP dissector component of Wireshark is affected by CVE-2019-5719.
5
Is there a known exploit for CVE-2019-5719?
There is no publicly known exploit for CVE-2019-5719, but it can cause a crash when processing malformed data.