Lucene search

GitLabCVELIST:CVE-2020-26419

HistoryDec 11, 2020 - 5:17 p.m.

CVE-2020-26419

2020-12-1117:17:07

GitLab

www.cve.org

wireshark

memory leak

denial of service

packet injection

crafted capture file

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

71.3%

JSON

Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.

CNA Affected

[
  {
    "product": "Wireshark",
    "vendor": "The Wireshark Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "3.4.0"
      }
    ]
  }
]

References

gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26419.json

gitlab.com/wireshark/wireshark/-/issues/17032

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M75HYXU36SP6GHIDPHNZGJKEO6TX4C4Y/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHWDZPWQJMLK64VFDWJC5SEGPNH6Y72Z/

security.gentoo.org/glsa/202101-12

www.oracle.com/security-alerts/cpuApr2021.html

www.wireshark.org/security/wnpa-sec-2020-19.html

CVSS3

3.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

71.3%

JSON

Related for CVELIST:CVE-2020-26419