The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade wireshark | Aug 22, 2024 | Oct 6, 2020 |
| Debian | — | Upgrade wireshark | Jul 30, 2024 | Oct 6, 2020 |
| Oracle Solaris | — | Upgrade diagnostic/wireshark/tshark to version 3.2.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade diagnostic/wireshark to version 3.2.7-11.4.27.0.1.82.0 on Solaris 11.4Upgrade diagnostic/wireshark/wireshark-common to version 3.2.7-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Oct 6, 2020 |
| Suse | — | Upgrade libwsutil11Upgrade libwiretap10Upgrade wireshark-ui-qtUpgrade wiresharkUpgrade wireshark-develUpgrade libwireshark13 | Jun 9, 2021 | Oct 6, 2020 |
| Wireshark | — | Upgrade to Wireshark version 3.0.14Upgrade to Wireshark version 3.2.7 | Sep 25, 2020 | Sep 25, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub