PT-2020-5442 · Wireshark+4 · Wireshark+4

Cl0Und Syclover Security Team + 1 · Published 2020-07-03 · Updated 2024-06-15 · CVE-2020-17498

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.2.0 through 3.2.5

Description The issue is related to the Kafka protocol dissector component in Wireshark, which could crash due to a double free error during LZ4 decompression. This could potentially allow a remote attacker to cause a denial of service. The problem was addressed by modifying the epan/dissectors/packet-kafka.c file to avoid the double free error.

Recommendations For Wireshark versions 3.2.0 through 3.2.5, update the software to a version where the issue has been fixed, specifically by applying the changes made to the epan/dissectors/packet-kafka.c file to avoid the double free error during LZ4 decompression. As a temporary workaround, consider disabling the Kafka protocol dissector until a patch is available.

Exploit

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

ALT-PU-2020-2650

ALT-PU-2020-2666

BDU:2021-00571

CVE-2020-17498

OPENSUSE-SU-2020:1878-1

OPENSUSE-SU-2020:1882-1

OPENSUSE-SU-2020_1878-1

OPENSUSE-SU-2020_1882-1

OPENSUSE-SU-2024:11513-1

SUSE-SU-2020:3166-1

SUSE-SU-2020_3166-1

USN-6262-1

Affected Products

Alt Linux

Linuxmint

Suse

Ubuntu

Wireshark

References · 202

• 🔥 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16672 · Exploit
• https://oracle.com/security-alerts/cpujan2021.html · Patch
• https://ubuntu.com/security/CVE-2020-15466 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00038.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-17498 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-17498 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1878-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202008-14 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00571 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AII7UYDPNKYE75AZL45M6HAV2COP7F6S · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-17498 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1882-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00035.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-17498 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/G7LO7DAPN33FL4JQ7DDPB76SIEFGMZSQ · Vendor Advisory