NetSight
IP …
high7.5

CVE-2020-25862

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash.

Impact

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by changing the handling of the invalid 0xFFFF checksum.

Affected products

VendorProductAffected versions
WiresharkWireshark
from 2.6.0 through 2.6.20
from 3.0.0 through 3.0.13
from 3.2.0 through 3.2.6
FedoraprojectFedora
Versions 31, 32, 33
OpensuseLeap
Versions 15.1, 15.2
DebianDebian Linux
Version 9.0
OracleZfs Storage Appliance Firmware
Version 8.8

Weakness classification

CWE-354

References