VDB

CVE-2020-28030

CVE-2020-28030 PUBLISHED CVSS 7.5 HIGH

In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement.

EPSS 2.07% · 79.9th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
2.07%
79.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSwireshark1.10.2-1, 1.10.3-1, 1.10.6-1
Ubuntu:Pro:16.04:LTSwireshark2.6.4-2~ubuntu16.04.0, 1.12.8+g5b6e543-2, 2.0.1+g59ea380-3build1
Ubuntu:Pro:18.04:LTSwireshark2.6.10-1~ubuntu18.04.0+esm2, 0, 2.4.2-1
Ubuntu:Pro:20.04:LTSwireshark0, 3.2.3-1, 3.2.1-1

Timeline

  • Oct 30, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 2, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Nov 7, 2022 EPSS Score
  • Jan 8, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›