Name: CVE-2020-26422: Buffer Copy without Checking Size of Input
Creator: Rapid7
Published: 2020-12-21T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-26422, CWE-120, CVSS 3.7, EPSS 0.04725

Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file

CVSS Details

CVSS 3.1 Base Score: 3.7
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade wireshark	Aug 22, 2024	Dec 21, 2020
Gentoo Linux	—	Upgrade net-analyzer/wireshark.	Jan 25, 2021	Dec 21, 2020
Oracle Solaris	—	Upgrade diagnostic/wireshark/wireshark-common to version 3.4.4-11.4.32.0.1.88.2 on Solaris 11.4Upgrade diagnostic/wireshark/tshark to version 3.4.4-11.4.32.0.1.88.2 on Solaris 11.4Upgrade diagnostic/wireshark to version 3.4.4-11.4.32.0.1.88.2 on Solaris 11.4	Apr 21, 2021	Dec 21, 2020
Suse	—	Upgrade libvirtUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-networkUpgrade sbc-develUpgrade libvirt-develUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nwfilterUpgrade wireshark-develUpgrade libqt5-qtmultimedia-private-headers-develUpgrade libvirt-daemon-driver-lxcUpgrade sbcUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libsbc1Upgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-diskUpgrade wiresharkUpgrade libvirt-lock-sanlockUpgrade libvirt-adminUpgrade libqt5-qtmultimedia-develUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-xenUpgrade libvirt-docUpgrade wireshark-ui-qtUpgrade libwiretap11Upgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-coreUpgrade libwireshark14Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-mpathUpgrade libsbc1-32bitUpgrade libwsutil12Upgrade libvirt-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-lxcUpgrade libqt5multimedia5	Jun 26, 2021	Dec 21, 2020
Wireshark	—	Upgrade to Wireshark version 3.4.2	Dec 21, 2020	Dec 21, 2020

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence

MDR Buyer's Guide

Global Threat Landscape Report