vulnerability
Wireshark : CVE-2020-11647 : BACapp dissector crash
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:N/A:P) | Apr 9, 2020 | Apr 9, 2020 | Apr 15, 2020 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Apr 9, 2020
Added
Apr 9, 2020
Modified
Apr 15, 2020
Description
In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion.
Solution(s)
wireshark-upgrade-2_6_16wireshark-upgrade-3_0_10wireshark-upgrade-3_2_3
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.