low3.1
CVE-2020-26419
Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.
Impact
Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wireshark | Wireshark | Version 3.4.0 |
| Fedoraproject | Fedora | Versions 32, 33 |
| Oracle | Zfs Storage Appliance Kit | Version 8.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26419.json
- https://gitlab.com/wireshark/wireshark/-/issues/17032
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M75HYXU36SP6GHIDPHNZGJKEO6TX4C4Y/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHWDZPWQJMLK64VFDWJC5SEGPNH6Y72Z/
- https://security.gentoo.org/glsa/202101-12
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.wireshark.org/security/wnpa-sec-2020-19.html
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26419.json
- https://gitlab.com/wireshark/wireshark/-/issues/17032
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M75HYXU36SP6GHIDPHNZGJKEO6TX4C4Y/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHWDZPWQJMLK64VFDWJC5SEGPNH6Y72Z/
- https://security.gentoo.org/glsa/202101-12
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.wireshark.org/security/wnpa-sec-2020-19.html