CVE-2020-25866
06.10.2020, 15:15
In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs.Enginsight
| Vendor | Product | Version |
|---|---|---|
| wireshark | wireshark | 3.0.0 ≤ 𝑥 ≤ 3.0.13 |
| wireshark | wireshark | 3.2.0 ≤ 𝑥 ≤ 3.2.6 |
| opensuse | leap | 15.1 |
| opensuse | leap | 15.2 |
| oracle | zfs_storage_appliance_kit | 8.8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References