CVE-2019-5716

Description

In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.274

Associated Vulnerability

VulnerabilityOS Platform
Wireshark (2.6.6)Windows
Vulnerabilities CVE-2019-5719,CVE-2019-5718,CVE-2019-5717,CVE-2019-5716 are fixed in Wireshark x64 2.6.6Windows
Vulnerabilities CVE-2019-5719,CVE-2019-5718,CVE-2019-5717,CVE-2019-5716 are fixed in Wireshark (X64) (2.6.6)Windows
Vulnerabilities CVE-2019-5716,CVE-2019-5717,CVE-2019-5718,CVE-2019-5719 are affected in WireShark For Mac 2.6.5Mac
wireshark security update(DSA-4416-1) wireshark_2.6.7-1~deb9u1_i386.debLinux
wireshark security update(DSA-4416-1) wireshark_2.6.7-1~deb9u1_amd64.debLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-308738Wireshark (2.6.6)
PATCH-308738Wireshark (2.6.6)
PATCH-308739Wireshark (X64) (2.6.6)
PATCH-611905WireShark for Mac (Apple Silicon) (4.4.9)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234