CVE-2020-25863
06.10.2020, 15:15
In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts.Enginsight
| Vendor | Product | Version |
|---|---|---|
| wireshark | wireshark | 2.6.0 ≤ 𝑥 ≤ 2.6.20 |
| wireshark | wireshark | 3.0.0 ≤ 𝑥 ≤ 3.0.13 |
| wireshark | wireshark | 3.2.0 ≤ 𝑥 ≤ 3.2.6 |
| opensuse | leap | 15.1 |
| opensuse | leap | 15.2 |
| debian | debian_linux | 9.0 |
| oracle | zfs_storage_appliance_firmware | 8.8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| wireshark |
|
References