Alpine/wireshark: high 7.5
In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.
Action: Upgrade wireshark to 3.2.5-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2.0 | 3.2.5-r0 | - |
Fixed versions
| 3.2.5-r0 |
Sources
- osv: ALPINE-CVE-2020-15466#Alpine:v3.17/wireshark
- https://security.alpinelinux.org/vuln/CVE-2020-15466
published · modified · JSON