NetSight
IP …
high7.5

CVE-2020-13164

In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash.

Impact

In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem.

Affected products

VendorProductAffected versions
WiresharkWireshark
from 2.6.0 through 2.6.16
from 3.0.0 through 3.0.10
from 3.2.0 through 3.2.3
DebianDebian Linux
Version 9.0
OpensuseLeap
Versions 15.1, 15.2
FedoraprojectFedora
Versions 31, 32

Weakness classification

CWE-674

References