low3.7
CVE-2020-26422
Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file
Impact
Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wireshark | Wireshark | Versions 3.4.0, 3.4.1 |
| Oracle | Zfs Storage Appliance Kit | Version 8.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26422.json
- https://gitlab.com/wireshark/wireshark/-/issues/17073
- https://security.gentoo.org/glsa/202101-12
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.wireshark.org/security/wnpa-sec-2020-20.html
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26422.json
- https://gitlab.com/wireshark/wireshark/-/issues/17073
- https://security.gentoo.org/glsa/202101-12
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.wireshark.org/security/wnpa-sec-2020-20.html