CVE-2019-19553: In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash.

Security readout for executives and security teams

CVE-2019-19553 is a Wireshark flaw where certain CMS dissection handling could crash the application. The known impact is loss of analyst tooling availability, not system takeover. Public sources name affected Wireshark 3.0.0-3.0.6 and 2.6.0-2.6.12, with downstream updates from distributions and vendors. Exposure is likely limited to systems running affected Wireshark versions or downstream packages that process CMS-related traffic or capture files. It primarily affects analyst workstations, security operations tooling, and bundled vendor products that included vulnerable Wireshark components. Handle through normal vulnerability maintenance, with higher priority for SOC and forensic workstations. The business risk is interruption of packet analysis, not confirmed compromise. Lack of CVSS and exploitation evidence lowers urgency but does not remove the need to update. Mitigation focus: Upgrade Wireshark beyond 3.0.6 or 2.6.12 where applicable.; Apply vendor distribution updates from Debian, openSUSE, Oracle, or relevant package maintainers.; Review vendor guidance for bundled Wireshark components in third-party products..

Prepared

Jun 6, 2026, 03:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.