In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-wireshark | Jun 16, 2020 | Apr 10, 2020 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Apr 10, 2020 | |
| Debian | debian-upgrade-wireshark | Feb 8, 2021 | Apr 10, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-net-analyzer-wireshark | Jul 28, 2020 | Apr 10, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-diagnostic-wireshark-3-2-4-11-4-22-0-1-69-4oracle-solaris-11-4-upgrade-diagnostic-wireshark-tshark-3-2-4-11-4-22-0-1-69-4oracle-solaris-11-4-upgrade-diagnostic-wireshark-wireshark-common-3-2-4-11-4-22-0-1-69-4 | Jan 19, 2021 | Apr 10, 2020 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Apr 10, 2020 | |
| Suse | — | suse-upgrade-libwireshark13suse-upgrade-libwiretap10suse-upgrade-libwsutil11suse-upgrade-wiresharksuse-upgrade-wireshark-develsuse-upgrade-wireshark-ui-qt | Aug 13, 2020 | Apr 10, 2020 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Apr 10, 2020 | |
| Wireshark | wireshark-upgrade-2_6_16wireshark-upgrade-3_0_10wireshark-upgrade-3_2_3 | Apr 9, 2020 | Apr 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub