In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-wireshark | Feb 15, 2019 | Jan 8, 2019 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 8, 2019 | |
| Debian | debian-upgrade-wireshark | Feb 14, 2019 | Jan 8, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-diagnostic-wireshark-2-6-6-11-4-6-0-1-2-0oracle-solaris-11-4-upgrade-diagnostic-wireshark-tshark-2-6-6-11-4-6-0-1-2-0oracle-solaris-11-4-upgrade-diagnostic-wireshark-wireshark-common-2-6-6-11-4-6-0-1-2-0 | Feb 20, 2019 | Jan 8, 2019 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Jan 8, 2019 | |
| Suse | — | suse-upgrade-libmaxminddb-develsuse-upgrade-libmaxminddb0suse-upgrade-libmaxminddb0-32bitsuse-upgrade-libspandsp2suse-upgrade-libspandsp2-32bitsuse-upgrade-libwireshark13suse-upgrade-libwireshark9suse-upgrade-libwiretap10suse-upgrade-libwiretap7suse-upgrade-libwscodecs1suse-upgrade-libwsutil11suse-upgrade-libwsutil8suse-upgrade-mmdblookupsuse-upgrade-spandsp-develsuse-upgrade-spandsp-docsuse-upgrade-wiresharksuse-upgrade-wireshark-develsuse-upgrade-wireshark-gtksuse-upgrade-wireshark-ui-qt | Jan 22, 2019 | Jan 8, 2019 |
| Ubuntu | ubuntu-upgrade-wireshark | Nov 19, 2024 | Jan 8, 2019 | |
| Wireshark | wireshark-upgrade-2_4_12wireshark-upgrade-2_6_6 | Jan 10, 2019 | Jan 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub