VDB

CVE-2020-26575

CVE-2020-26575 PUBLISHED CVSS 7.5 HIGH

In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.

EPSS 3.12% · 87.3th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
3.12%
87.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSwireshark2.6.5-1~ubuntu16.04.0, 2.6.10-1~ubuntu16.04.0, 2.6.10-1~ubuntu16.04.0+esm1
Ubuntu:Pro:18.04:LTSwireshark2.4.5-1, 2.6.5-1~ubuntu18.04.0, 2.6.10-1~ubuntu18.04.0
Ubuntu:Pro:20.04:LTSwireshark3.2.3-1ubuntu0.1~esm2, 3.0.5-1, 3.0.7-1
Ubuntu:Pro:14.04:LTSwireshark1.10.2-1, 1.10.3-1, 1.10.5-2

Timeline

  • Oct 6, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 28, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 1, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Jul 4, 2022 EPSS Score
  • Sep 6, 2022 EPSS Score
  • Nov 8, 2022 EPSS Score
  • Mar 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›