PT-2020-6573 · Wireshark+3 · Wireshark+3

Published 2020-02-27 · Updated 2024-06-15 · CVE-2020-9430

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.6.0 through 2.6.14 Wireshark versions 3.0.0 through 3.0.8 Wireshark versions 3.2.0 through 3.2.1

Description The issue is related to insufficient input validation in the Wireshark program, which could allow a remote attacker to cause a denial of service. The problem lies in the WiMax DLMAP dissector, which could crash due to a lack of validation of a length field. This was addressed by validating the length field in the plugins/epan/wimax/msg dlmap.c file.

Recommendations For Wireshark versions 2.6.0 through 2.6.14, update the plugins/epan/wimax/msg dlmap.c file to include length field validation. For Wireshark versions 3.0.0 through 3.0.8, update the plugins/epan/wimax/msg dlmap.c file to include length field validation. For Wireshark versions 3.2.0 through 3.2.1, update the plugins/epan/wimax/msg dlmap.c file to include length field validation. As a temporary workaround, consider disabling the WiMax DLMAP dissector until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2020-1462

ALT-PU-2020-1555

BDU:2022-00253

CVE-2020-9430

DLA-2547-1

OPENSUSE-SU-2020:0362-1

OPENSUSE-SU-2020_0362-1

OPENSUSE-SU-2024:11513-1

SUSE-SU-2020:0693-1

Affected Products

Alt Linux

Astra Linux

Suse

Wireshark

References · 228

• 🔥 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16383 · Exploit
• 🔥 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16368 · Exploit
• https://security.gentoo.org/glsa/202007-13 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-9430 · Vendor Advisory
• https://wireshark.org/security/wnpa-sec-2020-04.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00253 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-9430 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2020:0362-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9430 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-9430 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDVMBCADP73TBISYCS6ARKOSNNJOGXXZ · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0693-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-9430 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-9430 · Vendor Advisory