In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Sep 23, 2020 | Jul 5, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 5, 2020 |
| Debian | — | Upgrade wireshark | Feb 8, 2021 | Jul 5, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/wireshark. | Jul 28, 2020 | Jul 5, 2020 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark/tshark to version 3.2.6-11.4.25.0.1.75.3 on Solaris 11.4Upgrade diagnostic/wireshark/wireshark-common to version 3.2.6-11.4.25.0.1.75.3 on Solaris 11.4Upgrade diagnostic/wireshark to version 3.2.6-11.4.25.0.1.75.3 on Solaris 11.4 | Jan 19, 2021 | Jul 5, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 5, 2020 |
| Suse | — | Upgrade libwiretap10Upgrade libwsutil11Upgrade wiresharkUpgrade libwireshark13Upgrade wireshark-develUpgrade wireshark-ui-qt | Aug 13, 2020 | Jul 5, 2020 |
| Ubuntu | — | Upgrade libwireshark13 (Ubuntu Pro)Upgrade wireshark (Ubuntu Pro)Upgrade wireshark-qt (Ubuntu Pro)Upgrade wireshark-gtk (Ubuntu Pro)Upgrade wireshark-common (Ubuntu Pro)Upgrade tshark (Ubuntu Pro)Upgrade libwireshark11 (Ubuntu Pro) | Aug 1, 2023 | Jul 5, 2020 |
| Wireshark | — | Upgrade to Wireshark version 3.2.5 | Jul 2, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub