CVE-2019-19553 : Security Advisory and Response

Wireshark versions 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12 were affected by a vulnerability in the CMS dissector that could lead to crashes. The issue was resolved by setting the object identifier to NULL post dissection of ContentInfo.

Understanding CVE-2019-19553

This CVE entry pertains to a specific vulnerability found in Wireshark versions 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12.

What is CVE-2019-19553?

Wireshark versions 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12 were susceptible to a flaw in the CMS dissector that had the potential to cause crashes.

The Impact of CVE-2019-19553

The vulnerability could lead to crashes in Wireshark, affecting the stability and reliability of the software.

Technical Details of CVE-2019-19553

This section provides more in-depth technical insights into the CVE.

Vulnerability Description

The issue resided in the CMS dissector of Wireshark versions 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, potentially causing crashes.

Affected Systems and Versions

Wireshark versions 3.0.0 to 3.0.6
Wireshark versions 2.6.0 to 2.6.12

Exploitation Mechanism

The problem stemmed from the CMS dissector, where a crash could occur due to mishandling of object identifiers.

Mitigation and Prevention

Protecting systems from CVE-2019-19553 requires immediate actions and long-term security measures.

Immediate Steps to Take

Update Wireshark to the latest patched version immediately.
Avoid opening suspicious or untrusted network captures.

Long-Term Security Practices

Regularly update Wireshark and other software to patch vulnerabilities.
Implement network segmentation to limit the impact of potential attacks.

Patching and Updates

Apply all security updates and patches provided by Wireshark promptly to mitigate the vulnerability.