PT-2020-5493 · Wireshark+2 · Wireshark+2

Published 2020-09-30 · Updated 2024-06-15 · CVE-2020-25866

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.0.0 through 3.0.13 Wireshark versions 3.2.0 through 3.2.6

Description The issue is related to a NULL pointer dereference in the BLIP protocol dissector due to a buffer being sized for compressed messages, not uncompressed ones. This could allow a remote attacker to cause a denial of service. The problem was addressed by allowing reasonable compression ratios and rejecting ZIP bombs in the epan/dissectors/packet-blip.c file.

Recommendations For Wireshark versions 3.0.0 through 3.0.13, update to a version that includes the fix for the BLIP protocol dissector issue. For Wireshark versions 3.2.0 through 3.2.6, update to a version that includes the fix for the BLIP protocol dissector issue. As a temporary workaround, consider restricting the use of the BLIP protocol dissector until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2020-2896

ALT-PU-2020-2943

ALT-PU-2022-1368

BDU:2021-00874

CVE-2020-25866

MGASA-2020-0384

OPENSUSE-SU-2020:1878-1

OPENSUSE-SU-2020:1882-1

OPENSUSE-SU-2020_1878-1

OPENSUSE-SU-2020_1882-1

OPENSUSE-SU-2024:11513-1

SUSE-SU-2020:3166-1

Affected Products

Alt Linux

Suse

Wireshark

References · 203

• 🔥 https://gitlab.com/wireshark/wireshark/-/issues/16866 · Exploit
• https://oracle.com/security-alerts/cpujan2021.html · Patch
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00038.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IGRYKW4XLR44YDWTAH547ODYYBYPB2D · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1878-1 · Vendor Advisory
• https://wireshark.org/security/wnpa-sec-2020-13.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-25866 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2020:1882-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00035.html · Vendor Advisory
• https://gitlab.com/wireshark/wireshark/-/commit/4a948427100b6c109f4ec7b4361f0d2aec5e5c3f · Patch
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZUHMK5HYTUUDXA64T2TAMAFMYV674QBW · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25866 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DQHPKZFQ7W3X34RYN3FWFYCFJD4FXJW · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25866 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25866 · Vendor Advisory