CVE-2020-13164

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-13164
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-13164.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-13164
Downstream
Related
Published
2020-05-19T22:15:12.153Z
Modified
2026-05-13T04:03:04.616081827Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "31"
                }
            ],
            "cpe": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*"
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.2"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://github.com/wireshark/wireshark
Events
Introduced
c7239f0201292253817c7c4c9a394a47113ca55c
Last affected
4a11ef6e2bacd1b470c62cda03f1590386deebd9
Introduced
937e33de60bcfcd6f68e7250e5e6914ae1d1e1e4
Last affected
aa0261e8ddf31435a23cfef1ee84c13bb4f7779e
Introduced
e0ed4cfa3d72110257da54c26ad3a28d282ef454
Last affected
f39b50865a139cde907c68b1eda0471ae616d46c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fb2c25aa9c1b4a6f7e5a8c92a5c66503702553ac
Database specific 
{
    "source": "CPE_FIELD",
    "cpe": [
        "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
        "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "2.6.0"
        },
        {
            "last_affected": "2.6.16"
        },
        {
            "introduced": "3.0.0"
        },
        {
            "last_affected": "3.0.10"
        },
        {
            "introduced": "3.2.0"
        },
        {
            "last_affected": "3.2.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "32"
        }
    ]
}

Affected versions

Other
backups/ethereal@18706
backups/win32-native@18706
ethereal-0-3-15
start
ethereal-0.*
ethereal-0.3.15
v2.*
v2.6.0
v2.6.1
v2.6.10
v2.6.10rc0
v2.6.11
v2.6.11rc0
v2.6.12
v2.6.12rc0
v2.6.13
v2.6.13rc0
v2.6.14
v2.6.14rc0
v2.6.15
v2.6.15rc0
v2.6.16
v2.6.16rc0
v2.6.1rc0
v2.6.2
v2.6.2rc0
v2.6.3
v2.6.3rc0
v2.6.4
v2.6.4rc0
v2.6.5
v2.6.5rc0
v2.6.6
v2.6.6rc0
v2.6.7
v2.6.7rc0
v2.6.8
v2.6.8rc0
v2.6.9
v2.6.9rc0
v3.*
v3.0.0
v3.0.1
v3.0.10
v3.0.10rc0
v3.0.1rc0
v3.0.2
v3.0.2rc0
v3.0.3
v3.0.3rc0
v3.0.4
v3.0.4rc0
v3.0.5
v3.0.5rc0
v3.0.6
v3.0.6rc0
v3.0.7
v3.0.7rc0
v3.0.8
v3.0.8rc0
v3.0.9
v3.0.9rc0
v3.2.0
v3.2.1
v3.2.1rc0
v3.2.2
v3.2.2rc0
v3.2.3
v3.2.3rc0
wireshark-2.*
wireshark-2.6.0
wireshark-2.6.1
wireshark-2.6.10
wireshark-2.6.11
wireshark-2.6.12
wireshark-2.6.13
wireshark-2.6.14
wireshark-2.6.15
wireshark-2.6.16
wireshark-2.6.2
wireshark-2.6.3
wireshark-2.6.4
wireshark-2.6.5
wireshark-2.6.6
wireshark-2.6.7
wireshark-2.6.8
wireshark-2.6.9
wireshark-3.*
wireshark-3.0.0
wireshark-3.0.1
wireshark-3.0.10
wireshark-3.0.2
wireshark-3.0.3
wireshark-3.0.4
wireshark-3.0.5
wireshark-3.0.6
wireshark-3.0.7
wireshark-3.0.8
wireshark-3.0.9
wireshark-3.2.0
wireshark-3.2.1
wireshark-3.2.2
wireshark-3.2.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-13164.json"