Description
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values.
References (11)
Scores
CVSS v3
5.5
EPSS
0.0052
EPSS Percentile
66.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-193
CWE-787
Status
published
Products (9)
canonical/ubuntu_linux
16.04
canonical/ubuntu_linux
18.04
canonical/ubuntu_linux
18.10
debian/debian_linux
8.0
debian/debian_linux
9.0
opensuse/leap
15.0
opensuse/leap
15.1
opensuse/leap
42.3
wireshark/wireshark
2.4.0 - 2.4.12
Published
Feb 28, 2019
Tracked Since
Feb 18, 2026