CVE-2019-9208
published 2019-02-28CVE-2019-9208: In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL…
PriorityP335high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
3.86%
89.1th percentile
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | wireshark | < wireshark 2.6.7-1 (bookworm) | wireshark 2.6.7-1 (bookworm) |
| wireshark | wireshark | >= 0 < 2.6.7-1 | 2.6.7-1 |
| wireshark | wireshark | >= 0 < 2.6.7-1 | 2.6.7-1 |
| wireshark | wireshark | >= 0 < 2.6.7-1 | 2.6.7-1 |
| wireshark | wireshark | >= 0 < 2.6.7-1 | 2.6.7-1 |
| wireshark | wireshark | 2.4.0 – 2.4.12 | — |
| wireshark | wireshark | 2.6.0 – 2.6.6 | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Wireshark vulnerabilities
vendor_ubuntu·2019-05-16
CVE-2019-10894 Wireshark vulnerabilities
Title: Wireshark vulnerabilities
Summary: Wireshark could be made to crash if it received specially crafted network
traffic or input files.
It was discovered that Wireshark improperly handled certain input. A remote or
local attacker could cause Wireshark to crash by injecting malform packets onto
the wire or convincing someone to read a malformed packet trace file.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
wireshark: null-pointer dereference in TCAP dissector
vendor_redhat·2019-01-29·CVSS 7.5
CVE-2019-9208 [HIGH] CWE-476 wireshark: null-pointer dereference in TCAP dissector
wireshark: null-pointer dereference in TCAP dissector
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.
Statement: This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 5, 6, and 7.
Package: wireshark (Red Hat Enterprise Linux 5) - Not affected
Package: wireshark (Red Hat Enterprise Linux 6) - Not affected
Package: wireshark (Red Hat Enterprise Linux 7) - Not affected
Package: wireshark (Red Hat Enterprise Linux 8) - Will not fix
Debian
CVE-2019-9208: wireshark - In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash....
vendor_debian·2019·CVSS 7.5
CVE-2019-9208 [HIGH] CVE-2019-9208: wireshark - In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash....
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.
Scope: local
bookworm: resolved (fixed in 2.6.7-1)
bullseye: resolved (fixed in 2.6.7-1)
forky: resolved (fixed in 2.6.7-1)
sid: resolved (fixed in 2.6.7-1)
trixie: resolved (fixed in 2.6.7-1)
GHSA
GHSA-h33g-839v-6v7p: In Wireshark 2
ghsa_unreviewed·2022-05-14
CVE-2019-9208 [HIGH] CWE-476 GHSA-h33g-839v-6v7p: In Wireshark 2
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.
OSV
CVE-2019-9208: In Wireshark 2
osv·2019-02-28·CVSS 7.5
CVE-2019-9208 [HIGH] CVE-2019-9208: In Wireshark 2
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.
No detection rules found.
No public exploits indexed.
arXiv
Neural Transfer Learning for Repairing Security Vulnerabilities in C Code
arxiv_fulltext·2022-01-04
Neural Transfer Learning for Repairing Security Vulnerabilities in C Code
Neural Transfer Learning for Repairing
Security Vulnerabilities in C Code
Zimin Chen,
Steve Kommrusch,
and Martin Monperrus
Zimin Chen and Martin Monperrus are with KTH Royal Institute of Technology, Sweden.
E-mail: \zimin, monp\@kth.se
Steve Kommrusch is with Colorado State University, USA.
E-mail: [email protected]
Zimin Chen and Steve Kommrusch have equally contributed to the paper as first authors.
Manuscript submitted 2021-04-16.
## Abstract
In this paper, we address the problem of automatic repair of software vulnerabilities with deep learning. The major problem with data-driven vulnerability repair is that the few existing datasets of known confirmed vulnerabilities consist of only a few thousand examples. However, training a deep learning model often requires hundreds
arXiv
Using Sequence-to-Sequence Learning for Repairing C Vulnerabilities
arxiv_fulltext·2019-12-04·CVSS 7.5
[HIGH] Using Sequence-to-Sequence Learning for Repairing C Vulnerabilities
Using Sequence-to-Sequence Learning for Repairing C Vulnerabilities
Zimin Chen
KTH Royal Institue of Technology
[email protected]
Steve Kommrusch
Colorado State University
[email protected]
Martin Monperrus
KTH Royal Institue of Technology
[email protected]
## Abstract
Software vulnerabilities affect all businesses and research is being done to avoid, detect or repair them. In this article, we contribute a new technique for automatic vulnerability fixing. We present a system that uses the rich software development history that can be found on GitHub to train an AI system that generates patches. We apply sequence-to-sequence learning on a big dataset of code changes and we evaluate the trained system on real world vulnerabilities from the CVE database. The result shows the
Bugzilla
CVE-2019-9208 wireshark: null-pointer dereference in TCAP dissector
bugzilla·2019-03-04·CVSS 7.5
CVE-2019-9208 [HIGH] CVE-2019-9208 wireshark: null-pointer dereference in TCAP dissector
CVE-2019-9208 wireshark: null-pointer dereference in TCAP dissector
In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the TCAP dissector could crash. This was addressed in epan/dissectors/asn1/tcap/tcap.cnf by avoiding NULL pointer dereferences.
Reference:
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464
Upstream Patch:
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2
Discussion:
External References:
https://www.wireshark.org/security/wnpa-sec-2019-07.html
---
Statement:
This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 5, 6, and 7.
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.htmlhttp://www.securityfocus.com/bid/107203https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2https://seclists.org/bugtraq/2019/Mar/35https://usn.ubuntu.com/3986-1/https://www.debian.org/security/2019/dsa-4416https://www.oracle.com/security-alerts/cpujan2020.htmlhttps://www.wireshark.org/security/wnpa-sec-2019-07.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-04/msg00007.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-05/msg00027.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.htmlhttp://www.securityfocus.com/bid/107203https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15464https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3d1b8004ed3a07422ca5d4e4ee8097150b934fd2https://seclists.org/bugtraq/2019/Mar/35https://usn.ubuntu.com/3986-1/https://www.debian.org/security/2019/dsa-4416https://www.oracle.com/security-alerts/cpujan2020.htmlhttps://www.wireshark.org/security/wnpa-sec-2019-07.html
2019-02-28
Published