01 Record

CVE-2019-5717

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero.

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero.

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 1.44% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 71.3% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2019-01-08 23:00Z7 YR AGO

Last updated

2024-08-04 20:01Z2 YR AGO

Reserved

2019-01-08

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-20Improper Input ValidationClass
CWE-476NULL Pointer DereferenceBase

Data version

5.1

Document digest

fbf8ca249367c1250de898d87958c5d40848b0b3ef09472217613289a5ab0abe

05 Affected products

VendorProductVersionsPlatforms

debiandebian_linuxNot specified—

redhatenterprise_linuxNot specified—

wiresharkwiresharkNot specified—

06 References

bugs.wireshark.orghttps://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15337x_refsource_MISC
www.wireshark.orghttps://www.wireshark.org/security/wnpa-sec-2019-02.htmlx_refsource_MISC
lists.debian.org[debian-lts-announce] 20190128 [SECURITY] [DLA 1645-1] wireshark security updatehttps://lists.debian.org/debian-lts-announce/2019/01/msg00022.htmlmailing-listx_refsource_MLIST
code.wireshark.orghttps://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bf9272a92f3df1e4ccfaad434e123222ae5313f7x_refsource_MISC
www.securityfocus.com106482http://www.securityfocus.com/bid/106482vdb-entryx_refsource_BID
www.debian.orgDSA-4416https://www.debian.org/security/2019/dsa-4416vendor-advisoryx_refsource_DEBIAN
seclists.org20190324 [SECURITY] [DSA 4416-1] wireshark security updatehttps://seclists.org/bugtraq/2019/Mar/35mailing-listx_refsource_BUGTRAQ
lists.opensuse.orgopenSUSE-SU-2020:0362http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.htmlvendor-advisoryx_refsource_SUSE

01 Record index

CVE-2019-5717

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2019-5717

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References