PT-2020-16425

CVE-2020-26422

·

Published

2020-12-21

·

Updated

2024-06-15

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Wireshark versions 3.4.0 through 3.4.1
Description The issue is a buffer overflow in the QUIC dissector, allowing for denial of service via packet injection or crafted capture file.
Recommendations For Wireshark versions 3.4.0 through 3.4.1, consider disabling the QUIC dissector as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2021:0909-1
OPENSUSE-SU-2021_0909-1
OPENSUSE-SU-2021:2125-1
OPENSUSE-SU-2021_2125-1
OPENSUSE-SU-2024:11513-1
SUSE-SU-2021:2125-1
Found an issue in the description? Have something to add? Feel free to write us 👾