CVE-2020-26575

Katalog CVE

CVSS 7.5 · High EPSS 3,1%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada wireshark, fedoraproject fedora +2 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.

Rincian

Terbit di NVD

6 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

3,1% peluang dieksploitasi; lebih tinggi dari 87,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.wireshark.org/security/wnpa-sec-2020-14.html advisory vendor
• https://gitlab.com/wireshark/wireshark/-/commit/3ff940652962c099b73ae3233322b8697b0d10ab patch · advisory pihak ketiga
• https://gitlab.com/wireshark/wireshark/-/merge_requests/467 patch · advisory pihak ketiga
• https://gitlab.com/wireshark/wireshark/-/merge_requests/471 patch · advisory pihak ketiga
• https://gitlab.com/wireshark/wireshark/-/merge_requests/472 patch · advisory pihak ketiga
• https://gitlab.com/wireshark/wireshark/-/merge_requests/473 patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202011-08 advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpujan2021.html advisory pihak ketiga
• https://gitlab.com/wireshark/wireshark/-/issues/16887 broken link
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHZSVK7PO2LTG...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2667E6WKVE56...