Name: CVE-2020-26422: Buffer Copy without Checking Size of Input
Creator: Rapid7
Published: 2020-12-21T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-26422, CWE-120, CVSS 3.7, EPSS 0.00306

Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file

CVSS Details

CVSS 3.1 Base Score: 3.7
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade wireshark	Aug 22, 2024	Dec 21, 2020
Gentoo Linux	—	Upgrade net-analyzer/wireshark.	Jan 25, 2021	Dec 21, 2020
Oracle Solaris	—	Upgrade diagnostic/wireshark/tshark to version 3.4.4-11.4.32.0.1.88.2 on Solaris 11.4Upgrade diagnostic/wireshark/wireshark-common to version 3.4.4-11.4.32.0.1.88.2 on Solaris 11.4Upgrade diagnostic/wireshark to version 3.4.4-11.4.32.0.1.88.2 on Solaris 11.4	Apr 21, 2021	Dec 21, 2020
Suse	—	Upgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-hooksUpgrade libwsutil12Upgrade libvirt-daemonUpgrade libvirt-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libwiretap11Upgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-qemuUpgrade libsbc1-32bitUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedevUpgrade libwireshark14Upgrade wireshark-ui-qtUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-scsiUpgrade libqt5multimedia5Upgrade libvirt-daemon-driver-networkUpgrade libqt5-qtmultimedia-develUpgrade sbcUpgrade libvirt-lock-sanlockUpgrade sbc-develUpgrade libvirt-nssUpgrade wiresharkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-lxcUpgrade libqt5-qtmultimedia-private-headers-develUpgrade libvirt-clientUpgrade libvirt-daemon-driver-secretUpgrade libvirt-adminUpgrade libsbc1Upgrade libvirt-develUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-config-networkUpgrade libvirtUpgrade wireshark-devel	Jun 26, 2021	Dec 21, 2020
Wireshark	—	Upgrade to Wireshark version 3.4.2	Dec 21, 2020	Dec 21, 2020

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence