Vulnerabilities > CVE-2020-25866 - NULL Pointer Dereference vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

NVD

Published: 2020-10-06

Updated: 2024-11-21

Summary

In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs.

Vulnerable Configurations

Part	Description	Count
Application	Wireshark Wireshark Wireshark 3.0.0 Wireshark Wireshark 3.0.1 Wireshark Wireshark 3.0.2 Wireshark Wireshark 3.0.3 Wireshark Wireshark 3.0.4 Wireshark Wireshark 3.0.5 Wireshark Wireshark 3.0.6 Wireshark Wireshark 3.0.7 Wireshark Wireshark 3.0.8 Wireshark Wireshark 3.0.9 Wireshark Wireshark 3.0.10 Wireshark Wireshark 3.0.11 Wireshark Wireshark 3.0.12 Wireshark Wireshark 3.0.13 Wireshark Wireshark 3.2.0 Wireshark Wireshark 3.2.1 Wireshark Wireshark 3.2.2 Wireshark Wireshark 3.2.3 Wireshark Wireshark 3.2.4 Wireshark Wireshark 3.2.5 Wireshark Wireshark 3.2.6	21
Application	Oracle Oracle ZFS Storage Appliance KIT 8.8	1
OS	Fedoraproject Fedoraproject Fedora 31 Fedoraproject Fedora 32 Fedoraproject Fedora 33	3
OS	Opensuse Opensuse Leap 15.1 Opensuse Leap 15.2	2

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References