CVEvulnerability
CVE-2020-26421
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-12-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.2 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-125
Description
Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
Affected configurations
• wireshark wireshark (>= 3.2.0 <= 3.2.8)
• wireshark wireshark 3.4.0
• fedoraproject fedora 32
• fedoraproject fedora 33
• debian debian linux 9.0
• oracle zfs storage appliance kit 8.8
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26421.json Third Party Advisory
- https://gitlab.com/wireshark/wireshark/-/issues/16958 Exploit, Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M75HYXU36SP6GHIDPHNZGJKEO6TX4C4Y/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHWDZPWQJMLK64VFDWJC5SEGPNH6Y72Z/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202101-12 Third Party Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory
- https://www.wireshark.org/security/wnpa-sec-2020-17.html Vendor Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26421.json Third Party Advisory
- https://gitlab.com/wireshark/wireshark/-/issues/16958 Exploit, Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M75HYXU36SP6GHIDPHNZGJKEO6TX4C4Y/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHWDZPWQJMLK64VFDWJC5SEGPNH6Y72Z/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202101-12 Third Party Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory
- https://www.wireshark.org/security/wnpa-sec-2020-17.html Vendor Advisory