NetSight
IP …
high7.5

CVE-2020-25863

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash.

Impact

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts.

Affected products

VendorProductAffected versions
WiresharkWireshark
from 2.6.0 through 2.6.20
from 3.0.0 through 3.0.13
from 3.2.0 through 3.2.6
FedoraprojectFedora
Versions 31, 32, 33
OpensuseLeap
Versions 15.1, 15.2
DebianDebian Linux
Version 9.0
OracleZfs Storage Appliance Firmware
Version 8.8

References