CVE-2020-26419 - Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injectio

CVE-2020-26419

Summary

Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.

References

Vulnerable Configurations

cpe:2.3:a:wireshark:wireshark:3.4.0:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:3.4.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

refmap via4

confirm	https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26419.json
gentoo	GLSA-202101-12
misc	https://gitlab.com/wireshark/wireshark/-/issues/17032 https://www.wireshark.org/security/wnpa-sec-2020-19.html

Last major update

02-09-2022 - 15:33

Published

11-12-2020 - 19:15

Last modified

02-09-2022 - 15:33