CVE-2020-26575

Name
CVE-2020-26575
Description
In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Patch https://gitlab.com/wireshark/wireshark/-/merge_requests/472
Patch https://gitlab.com/wireshark/wireshark/-/merge_requests/471
Patch https://gitlab.com/wireshark/wireshark/-/merge_requests/473
Broken Link https://gitlab.com/wireshark/wireshark/-/issues/16887
Patch https://gitlab.com/wireshark/wireshark/-/merge_requests/467
Patch https://gitlab.com/wireshark/wireshark/-/commit/3ff940652962c099b73ae3233322b8697b0d10ab
Vendor Advisory https://www.wireshark.org/security/wnpa-sec-2020-14.html
Third Party Advisory https://security.gentoo.org/glsa/202011-08
Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UHZSVK7PO2LTGFQXFHFXY6SOMSQ7UPRS/
Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V2667E6WKVE56G66BVBVD7LJPIDOJ7K3/
Third Party Advisory https://www.oracle.com/security-alerts/cpujan2021.html
Mailing List https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:* wireshark >= None <= 3.2.7

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
wireshark edge-community 3.4.0-r0 None fixed
wireshark edge-community 3.2.7-r0 None possibly vulnerable
wireshark edge-community 3.2.6-r0 None possibly vulnerable
wireshark edge-community 3.2.5-r0 None possibly vulnerable
wireshark edge-community 3.2.4-r0 None possibly vulnerable
wireshark edge-community 3.2.3-r0 None possibly vulnerable
wireshark edge-community 3.2.2-r0 None possibly vulnerable
wireshark edge-community 3.0.8-r0 None possibly vulnerable
wireshark edge-community 3.0.7-r0 None possibly vulnerable
wireshark edge-community 3.0.4-r0 None possibly vulnerable
wireshark edge-community 3.0.3-r0 None possibly vulnerable
wireshark edge-community 3.0.2-r0 None possibly vulnerable
wireshark edge-community 3.0.1-r0 None possibly vulnerable
wireshark edge-community 2.6.8-r0 None possibly vulnerable
wireshark edge-community 2.6.7-r0 None possibly vulnerable
wireshark edge-community 2.6.6-r0 None possibly vulnerable
wireshark edge-community 2.6.5-r0 None possibly vulnerable
wireshark edge-community 2.6.4-r0 None possibly vulnerable
wireshark edge-community 2.6.3-r0 None possibly vulnerable
wireshark edge-community 2.6.2-r0 None possibly vulnerable
wireshark edge-community 2.4.7-r0 None possibly vulnerable
wireshark edge-community 2.4.6-r0 None possibly vulnerable
wireshark edge-community 2.4.5-r0 None possibly vulnerable
wireshark edge-community 2.4.4-r0 None possibly vulnerable
wireshark edge-community 2.4.3-r0 None possibly vulnerable
wireshark edge-community 2.2.10-r0 None possibly vulnerable
wireshark edge-community 2.2.9-r0 None possibly vulnerable
wireshark edge-community 2.2.8-r0 None possibly vulnerable
wireshark edge-community 2.2.7-r0 None possibly vulnerable
wireshark edge-community 2.2.6-r0 None possibly vulnerable
wireshark edge-community 2.2.5-r0 None possibly vulnerable
wireshark edge-community 2.2.4-r1 None possibly vulnerable
wireshark edge-community 2.0.5-r0 None possibly vulnerable
wireshark 3.22-community 3.4.0-r0 None fixed
wireshark 3.22-community 3.2.7-r0 None possibly vulnerable
wireshark 3.22-community 3.2.6-r0 None possibly vulnerable
wireshark 3.22-community 3.2.5-r0 None possibly vulnerable
wireshark 3.22-community 3.2.4-r0 None possibly vulnerable
wireshark 3.22-community 3.2.3-r0 None possibly vulnerable
wireshark 3.22-community 3.2.2-r0 None possibly vulnerable
wireshark 3.22-community 3.0.8-r0 None possibly vulnerable
wireshark 3.22-community 3.0.7-r0 None possibly vulnerable
wireshark 3.22-community 3.0.4-r0 None possibly vulnerable
wireshark 3.22-community 3.0.3-r0 None possibly vulnerable
wireshark 3.22-community 3.0.2-r0 None possibly vulnerable
wireshark 3.22-community 3.0.1-r0 None possibly vulnerable
wireshark 3.22-community 2.6.8-r0 None possibly vulnerable
wireshark 3.22-community 2.6.7-r0 None possibly vulnerable
wireshark 3.22-community 2.6.6-r0 None possibly vulnerable
wireshark 3.22-community 2.6.5-r0 None possibly vulnerable
wireshark 3.22-community 2.6.4-r0 None possibly vulnerable
wireshark 3.22-community 2.6.3-r0 None possibly vulnerable
wireshark 3.22-community 2.6.2-r0 None possibly vulnerable
wireshark 3.22-community 2.4.7-r0 None possibly vulnerable
wireshark 3.22-community 2.4.6-r0 None possibly vulnerable
wireshark 3.22-community 2.4.5-r0 None possibly vulnerable
wireshark 3.22-community 2.4.4-r0 None possibly vulnerable
wireshark 3.22-community 2.4.3-r0 None possibly vulnerable
wireshark 3.22-community 2.2.10-r0 None possibly vulnerable
wireshark 3.22-community 2.2.9-r0 None possibly vulnerable
wireshark 3.22-community 2.2.8-r0 None possibly vulnerable
wireshark 3.22-community 2.2.7-r0 None possibly vulnerable
wireshark 3.22-community 2.2.6-r0 None possibly vulnerable
wireshark 3.22-community 2.2.5-r0 None possibly vulnerable
wireshark 3.22-community 2.2.4-r1 None possibly vulnerable
wireshark 3.22-community 2.0.5-r0 None possibly vulnerable
wireshark 3.21-community 3.4.0-r0 None fixed
wireshark 3.20-community 3.4.0-r0 None fixed
wireshark 3.19-community 3.4.0-r0 None fixed
wireshark 3.18-community 3.4.0-r0 None fixed
wireshark 3.17-community 3.4.0-r0 None fixed