KLA12080 DoS vulnerabilities in Wireshark

DoS vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. DoS vulnerability in the FBZERO protocol dissector can be exploited via special crafted file to cause denial of service.
2. DoS vulnerability in the GQUIC protocol dissector can be exploited via special crafted file to cause denial of service.

Original advisories

wnpa-sec-2020-14 · FBZERO dissector crash

wnpa-sec-2020-15 · GQUIC dissector crash

Related products

Wireshark

CVE list

CVE-2020-26575 critical

CVE-2020-28030 critical

Solution

Update to the latest version

Download Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark 3.2.x earlier than 3.2.8Wireshark 3.4.0 earlier than 3.4.0