CVE-2019-5721
In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan...
5.5 MediumFix available
In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
0.95%Down 0.1 points since Apr 14, 2021
What each source reports
NVD Score used
In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.
- Record
CVE-2019-5721- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.
- Record
CVE-2019-5721- Updated
- 2026-11-02
EUVDEUVD-2019-15295 No score
In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.
- Record
EUVD-2019-15295- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7gxq-23xx-mvh2
In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan...
In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.
- Record
GHSA-7gxq-23xx-mvh2- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-5721
In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.
- Record
ALPINE-CVE-2019-5721- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSV
In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.
- Record
CVE-2019-5721- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2019-5721
In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.
- Record
DEBIAN-CVE-2019-5721- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-5721
In Wireshark 2.4.0 to 2.4.11, the ENIP dissector could crash. This was addressed in epan/dissectors/packet-enip.c by changing the memory-management approach so that a use-after-free is avoided.
- Record
UBUNTU-CVE-2019-5721- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2019:0092-1 No score
Security update for wireshark
This update for wireshark to version 2.4.12 fixes the following issues:
Security issues fixed:
- CVE-2019-5717: Fixed a denial of service in the P_MUL dissector (bsc#1121232)
- CVE-2019-5718: Fixed a denial of service in the RTSE dissector and other dissectors (bsc#1121233)
- CVE-2019-5719: Fixed a denial of service in the ISAKMP dissector (bsc#1121234)
- CVE-2019-5721: Fixed a denial of service in the ISAKMP dissector (bsc#1121235)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:0092-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0362-1 No score
Security update for wireshark
This update for wireshark and libmaxminddb fixes the following issues:
Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).
New features include:
- Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC
- Improved support for existing protocols, like HTTP/2
- Improved analytics and usability functionalities
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:0362-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11513-1 No score
libwireshark14-3.4.8-1.2 on GA media
These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11513-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0130-1 No score
Security update for wireshark
This update for wireshark to version 2.4.12 fixes the following issues:
Security issues fixed:
- CVE-2019-5717: Fixed a denial of service in the P_MUL dissector (bsc#1121232)
- CVE-2019-5718: Fixed a denial of service in the RTSE dissector and other dissectors (bsc#1121233)
- CVE-2019-5719: Fixed a denial of service in the ISAKMP dissector (bsc#1121234)
- CVE-2019-5721: Fixed a denial of service in the ISAKMP dissector (bsc#1121235)
- Record
SUSE-SU-2019:0130-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0138-1 No score
Security update for wireshark
This update for wireshark to version 2.4.12 fixes the following issues:
Security issues fixed:
- CVE-2019-5717: Fixed a denial of service in the P_MUL dissector (bsc#1121232)
- CVE-2019-5718: Fixed a denial of service in the RTSE dissector and other dissectors (bsc#1121233)
- CVE-2019-5719: Fixed a denial of service in the ISAKMP dissector (bsc#1121234)
- CVE-2019-5721: Fixed a denial of service in the ISAKMP dissector (bsc#1121235)
- Record
SUSE-SU-2019:0138-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:0693-1 No score
Security update for wireshark
This update for wireshark and libmaxminddb fixes the following issues:
Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).
New features include:
- Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC
- Improved support for existing protocols, like HTTP/2
- Improved analytics and usability functionalities
- Record
SUSE-SU-2020:0693-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.10 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.11 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.12 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.13 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.14 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.15 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.16 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.17 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.18 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.19 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
Show 43 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.20 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.21 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.22 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.23 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.24 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkAlpine:v3.7 |
2.4.0 up to 2.4.12-r0 | 2.4.12-r0 |
wiresharkAlpine:v3.8 |
2.4.0 up to 2.4.12-r0 | 2.4.12-r0 |
wiresharkAlpine:v3.9 |
2.4.0 up to 2.6.6-r0 | 2.6.6-r0 |
wiresharkDebian:12 |
before 2.6.1-1 | 2.6.1-1 |
wiresharkDebian:13 |
before 2.6.1-1 | 2.6.1-1 |
wiresharkDebian:14 |
before 2.6.1-1 | 2.6.1-1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 4 CVEs |
before 2.4.12-3.19.1 | 2.4.12-3.19.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 From an advisory covering 4 CVEs |
before 2.4.12-3.19.1 | 2.4.12-3.19.1 |
wiresharkSUSE:Linux Enterprise Desktop 12 SP3 From an advisory covering 4 CVEs |
before 2.4.12-48.39.1 | 2.4.12-48.39.1 |
wiresharkSUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 4 CVEs |
before 2.4.12-48.39.1 | 2.4.12-48.39.1 |
wiresharkSUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 4 CVEs |
before 2.4.12-48.39.1 | 2.4.12-48.39.1 |
wiresharkSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 4 CVEs |
before 2.4.12-48.39.1 | 2.4.12-48.39.1 |
wiresharkSUSE:Linux Enterprise Server 12 SP3 From an advisory covering 4 CVEs |
before 2.4.12-48.39.1 | 2.4.12-48.39.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 4 CVEs |
before 2.4.12-48.39.1 | 2.4.12-48.39.1 |
wiresharkSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 4 CVEs |
before 2.4.12-48.39.1 | 2.4.12-48.39.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 4 CVEs |
before 2.4.12-48.39.1 | 2.4.12-48.39.1 |
libmaxminddbSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 59 CVEs |
before 1.4.2-1.3.1 | 1.4.2-1.3.1 |
spandspSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 59 CVEs |
before 0.0.6-3.2.1 | 0.0.6-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 59 CVEs |
before 3.2.2-3.35.2 | 3.2.2-3.35.2 |
spandspSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 From an advisory covering 59 CVEs |
before 0.0.6-3.2.1 | 0.0.6-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 From an advisory covering 59 CVEs |
before 3.2.2-3.35.2 | 3.2.2-3.35.2 |
libmaxminddbSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 59 CVEs |
before 1.4.2-1.3.1 | 1.4.2-1.3.1 |
spandspSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 59 CVEs |
before 0.0.6-3.2.1 | 0.0.6-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 59 CVEs |
before 3.2.2-3.35.2 | 3.2.2-3.35.2 |
libmaxminddbSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 59 CVEs |
before 1.4.2-1.3.1 | 1.4.2-1.3.1 |
spandspSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 59 CVEs |
before 0.0.6-3.2.1 | 0.0.6-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 59 CVEs |
before 3.2.2-3.35.2 | 3.2.2-3.35.2 |
libmaxminddbSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 59 CVEs |
before 1.4.2-1.3.1 | 1.4.2-1.3.1 |
spandspSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 59 CVEs |
before 0.0.6-3.2.1 | 0.0.6-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 59 CVEs |
before 3.2.2-3.35.2 | 3.2.2-3.35.2 |
libmaxminddbSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 59 CVEs |
before 1.4.2-1.3.1 | 1.4.2-1.3.1 |
spandspSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 59 CVEs |
before 0.0.6-3.2.1 | 0.0.6-3.2.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 59 CVEs |
before 3.2.2-3.35.2 | 3.2.2-3.35.2 |
wiresharkopenSUSE:Leap 15.0 From an advisory covering 4 CVEs |
before 2.4.12-lp150.2.19.1 | 2.4.12-lp150.2.19.1 |
libmaxminddbopenSUSE:Leap 15.1 From an advisory covering 59 CVEs |
before 1.4.2-lp151.3.3.1 | 1.4.2-lp151.3.3.1 |
spandspopenSUSE:Leap 15.1 From an advisory covering 59 CVEs |
before 0.0.6-lp151.3.3.1 | 0.0.6-lp151.3.3.1 |
wiresharkopenSUSE:Leap 15.1 From an advisory covering 59 CVEs |
before 3.2.2-lp151.2.9.1 | 3.2.2-lp151.2.9.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 163 CVEs |
before 3.4.8-1.2 | 3.4.8-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-5721 is a medium vulnerability (CVSS 5.5) in Wireshark, published January 8, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.95%, the 61st percentile. Fixed in wireshark 2.6.6-r0.
References
code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1c66174ec7aa19e2ddc79178cf59f15a654fc4fe
bugs.wireshark.org/bugzilla/show_bug.cgi?id=14470
wireshark.org/security/wnpa-sec-2019-05.html
lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
nvd.nist.gov/vuln/detail/CVE-2019-5721
Show 194 moreShow less
github.com/advisories/GHSA-7gxq-23xx-mvh2
security.alpinelinux.org/vuln/CVE-2019-5721
security-tracker.debian.org/tracker/CVE-2019-5721
suse.com/support/update/announcement/2019/suse-su-20190130-1
bugzilla.suse.com/1121232
ubuntu.com/security/CVE-2019-5721
cve.org/CVERecord?id=CVE-2019-5721
This page doesn't list everything
Left out here: 13 references. The JSON record has them.