0.004 Low
EPSS
Percentile
74.6%
In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.
bugzilla.redhat.com/show_bug.cgi?id=1831675
nvd.nist.gov/vuln/detail/CVE-2019-12295
www.cve.org/CVERecord?id=CVE-2019-12295
www.wireshark.org/security/wnpa-sec-2019-19.html