CVE-2020-25866

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.0.0 through 3.0.13 Wireshark versions 3.2.0 through 3.2.6

Description The issue is related to a NULL pointer dereference in the BLIP protocol dissector due to a buffer being sized for compressed messages, not uncompressed ones. This could allow a remote attacker to cause a denial of service. The problem was addressed by allowing reasonable compression ratios and rejecting ZIP bombs in the epan/dissectors/packet-blip.c file.

Recommendations For Wireshark versions 3.0.0 through 3.0.13, update to a version that includes the fix for the BLIP protocol dissector issue. For Wireshark versions 3.2.0 through 3.2.6, update to a version that includes the fix for the BLIP protocol dissector issue. As a temporary workaround, consider restricting the use of the BLIP protocol dissector until a patch is available.