Every CVE Search/ Get API key

CVE-2019-12295

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could...

7.5 HighFix available

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.77%Up 1.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

Record
CVE-2019-12295
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-674
Updated
2026-11-02
CVE List No score

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

Record
CVE-2019-12295
Updated
2026-11-02
EUVDEUVD-2019-3935 No score

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

Record
EUVD-2019-3935
Updated
2026-11-03
GitHub AdvisoriesGHSA-6c7j-gh7x-rw3h 7.5

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could...

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

Record
GHSA-6c7j-gh7x-rw3h
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-94, CWE-674
Updated
2026-11-02
OSVALPINE-CVE-2019-12295 7.5

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

Record
ALPINE-CVE-2019-12295
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 7.5

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

Record
CVE-2019-12295
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 4 moreShow less
OSVDEBIAN-CVE-2019-12295 7.5

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

Record
DEBIAN-CVE-2019-12295
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2021-1285 7.5

wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.

Security Fix(es):

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.(CVE-2019-12295)

Record
OESA-2021-1285
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-12295 7.5

In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.

Record
UBUNTU-CVE-2019-12295
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUSN-4133-1 No score

Wireshark vulnerabilities

It was discovered that Wireshark improperly handled certain input. A remote or local attacker could cause Wireshark to crash by injecting malformed packets onto the wire or convincing someone to read a malformed packet trace file.

Record
USN-4133-1
Updated
2026-11-02

Affected products

Show 4 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
wireshark
Alpine:v3.10
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.11
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.12
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.13
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.14
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.15
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.16
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.17
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.18
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.19
 2.4.0 up to 3.0.2-r0
3.0.2-r0
Show 18 moreShow less
Affected packages
PackageAffectedFixed
wireshark
Alpine:v3.20
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.21
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.22
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.23
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.24
 2.4.0 up to 3.0.2-r0
3.0.2-r0
wireshark
Alpine:v3.9
 2.4.0 up to 2.6.9-r0
2.6.9-r0
wireshark
Debian:12
 before 2.6.8-1.1
2.6.8-1.1
wireshark
Debian:13
 before 2.6.8-1.1
2.6.8-1.1
wireshark
Debian:14
 before 2.6.8-1.1
2.6.8-1.1
wireshark
Debian:9
From an advisory covering 7 CVEs
 before 2.6.8-1.1~deb9u1, plus listed versions
2.2.6+g32dac6a-22.2.6+g32dac6a-2+deb9u12.2.6+g32dac6a-2+deb9u22.2.6+g32dac6a-2+deb9u32.2.7-1
Show 20 moreShow less
2.4.0-12.4.1-12.4.2-12.4.3-12.4.4-12.4.5-12.4.6-12.6.1-12.6.2-12.6.2-22.6.3-12.6.3-1~deb9u12.6.4-12.6.4-22.6.5-12.6.5-1~deb9u12.6.6-12.6.7-12.6.7-1~deb9u12.6.8-1
2.6.8-1.1~deb9u1
wireshark
Debian:9
From an advisory covering 17 CVEs
 before 2.6.20-0+deb9u1, plus listed versions
2.2.6+g32dac6a-22.2.6+g32dac6a-2+deb9u12.2.6+g32dac6a-2+deb9u22.2.6+g32dac6a-2+deb9u32.2.7-1
Show 24 moreShow less
2.4.0-12.4.1-12.4.2-12.4.3-12.4.4-12.4.5-12.4.6-12.6.1-12.6.10-12.6.2-12.6.2-22.6.3-12.6.3-1~deb9u12.6.4-12.6.4-22.6.5-12.6.5-1~deb9u12.6.6-12.6.7-12.6.7-1~deb9u12.6.8-12.6.8-1.12.6.8-1.1~deb9u12.6.9-1
2.6.20-0+deb9u1
wireshark
openEuler:20.03-LTS-SP1
 before 2.6.2-20.oe1
2.6.2-20.oe1
wireshark
openEuler:20.03-LTS-SP2
 before 2.6.2-20.oe1
2.6.2-20.oe1
wireshark
Ubuntu:Pro:14.04:LTS
 before 2.6.10-1~ubuntu14.04.0~esm1, plus listed versions
1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1
Show 6 moreShow less
1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm1
2.6.10-1~ubuntu14.04.0~esm1
wireshark
Ubuntu:16.04:LTS
 before 2.6.10-1~ubuntu16.04.0, plus listed versions
1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04
Show 5 moreShow less
2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.0
2.6.10-1~ubuntu16.04.0
wireshark
Ubuntu:18.04:LTS
 before 2.6.10-1~ubuntu18.04.0, plus listed versions
2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1
Show 4 moreShow less
2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.0
2.6.10-1~ubuntu18.04.0
wireshark
Ubuntu:16.04:LTS
From an advisory covering 2 CVEs
 before 2.6.10-1~ubuntu16.04.0, plus listed versions
1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04
Show 5 moreShow less
2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.0
2.6.10-1~ubuntu16.04.0
wireshark
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 2.6.10-1~ubuntu18.04.0, plus listed versions
2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1
Show 4 moreShow less
2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.0
2.6.10-1~ubuntu18.04.0

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-12295 is a high vulnerability (CVSS 7.5) in Wireshark, published May 23, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.77%, the 89th percentile. Fixed in wireshark 3.0.2-r0.

References

Show 13 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open