vulnerability
Wireshark : CVE-2020-9428 : EAP dissector crash
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:N/A:P) | Feb 27, 2020 | Mar 2, 2020 | Mar 2, 2020 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Feb 27, 2020
Added
Mar 2, 2020
Modified
Mar 2, 2020
Description
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the EAP dissector could crash. This was addressed in epan/dissectors/packet-eap.c by using more careful sscanf parsing.
Solution(s)
wireshark-upgrade-2_6_15wireshark-upgrade-3_0_9wireshark-upgrade-3_2_2
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.