PT-2020-16424
CVE-2020-26420
·
Published
2020-12-11
·
Updated
2024-06-15
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Wireshark versions 3.2.0 through 3.2.8
Wireshark version 3.4.0
Description
A memory leak in the RTPS protocol dissector allows for denial of service via packet injection or crafted capture file. This issue can be exploited by injecting packets or using a specially crafted capture file, leading to a denial of service.
Recommendations
For Wireshark versions 3.2.0 through 3.2.8, update to a version that fixes the memory leak issue in the RTPS protocol dissector.
For Wireshark version 3.4.0, update to a version that fixes the memory leak issue in the RTPS protocol dissector.
As a temporary workaround, consider disabling the RTPS protocol dissector until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾