CVE-2020-26575
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-26575
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-26575.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2020-26575
- Downstream
- Related
- Published
- 2020-10-06T15:15:15Z
- Modified
- 2025-09-19T12:15:12.418180Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.
- References
-
- https://gitlab.com/wireshark/wireshark/-/commit/3ff940652962c099b73ae3233322b8697b0d10ab
- https://gitlab.com/wireshark/wireshark/-/merge_requests/467
- https://gitlab.com/wireshark/wireshark/-/merge_requests/471
- https://gitlab.com/wireshark/wireshark/-/merge_requests/472
- https://gitlab.com/wireshark/wireshark/-/merge_requests/473
- https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
- https://security.gentoo.org/glsa/202011-08
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.wireshark.org/security/wnpa-sec-2020-14.html
- https://gitlab.com/wireshark/wireshark/-/issues/16887
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHZSVK7PO2LTGFQXFHFXY6SOMSQ7UPRS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2667E6WKVE56G66BVBVD7LJPIDOJ7K3/
Affected packages
Git / github.com/wireshark/wireshark
Affected ranges
- Type
- GIT
- Repo
- https://github.com/wireshark/wireshark
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
- Type
- GIT
- Repo
- https://gitlab.com/wireshark/wireshark
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
Other
backups/ethereal@18706
ethereal-0-3-15
start
ethereal-0.*
ethereal-0.3.15
v1.*
v1.11.0
v1.11.0-rc1
v1.11.1
v1.11.1-rc1
v1.11.2
v1.11.2-rc1
v1.11.3
v1.11.3-rc1
v1.11.4-rc1
v1.99.0
v1.99.0-rc1
v1.99.1
v1.99.10rc0
v1.99.1rc0
v1.99.2
v1.99.2rc0
v1.99.3
v1.99.3rc0
v1.99.4
v1.99.4rc0
v1.99.5
v1.99.5rc0
v1.99.6
v1.99.6rc0
v1.99.7
v1.99.7rc0
v1.99.8
v1.99.8rc0
v1.99.9
v1.99.9rc0
v2.*
v2.1.0
v2.1.0rc0
v2.1.1
v2.1.1rc0
v2.1.2rc0
v2.3.0rc0
v2.5.0
v2.5.0rc0
v2.5.1
v2.5.1rc0
v2.5.2rc0
v2.9.0
v2.9.0rc0
v2.9.1rc0
v3.*
v3.1.0
v3.1.0rc0
v3.1.1
v3.1.1rc0
v3.1.2rc0
v3.2.0
v3.2.0rc0
v3.2.0rc1
v3.2.0rc2
v3.2.1
v3.2.1rc0
v3.2.2
v3.2.2rc0
v3.2.3
v3.2.3rc0
v3.2.4
v3.2.4rc0
v3.2.5
v3.2.5rc0
v3.2.6
v3.2.6rc0
v3.2.7
v3.2.7rc0
v3.3.0
v3.3.0rc0
v3.3.1
v3.3.1rc0
v3.3.2rc0
wireshark-1.*
wireshark-1.11.3
wireshark-1.99.0
wireshark-1.99.1
wireshark-1.99.2
wireshark-1.99.3
wireshark-1.99.4
wireshark-1.99.5
wireshark-1.99.6
wireshark-1.99.7
wireshark-1.99.8
wireshark-1.99.9
wireshark-2.*
wireshark-2.1.0
wireshark-2.1.1
wireshark-2.5.0
wireshark-3.*
wireshark-3.2.0
wireshark-3.2.1
wireshark-3.2.2
wireshark-3.2.3
wireshark-3.2.4
wireshark-3.2.5
wireshark-3.2.6
wireshark-3.2.7
Database specific
{
"vanir_signatures": [
{
"digest": {
"length": 5016.0,
"function_hash": "84154261008737939902450171764549140288"
},
"source": "https://gitlab.com/wireshark/wireshark@3ff940652962c099b73ae3233322b8697b0d10ab",
"id": "CVE-2020-26575-5297c41c",
"signature_version": "v1",
"target": {
"function": "proto_register_fb_zero",
"file": "epan/dissectors/packet-fbzero.c"
},
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"277478937141174828028637895756283579410",
"10019354092826942567024362475433115388",
"131525010486751362225464350724994977345",
"254780059365605332650960319914820935612",
"201894044631323551269775482078671692288",
"93724516377978981379597795420637442662",
"99556750202311595969094874610977454676",
"237055850321980614802788386596803708312",
"95637253697329982411058909251583561328",
"110322938865728618629951955156544462870",
"43434634064579026997284057392357874152",
"234337073310607543188225005935108678463",
"48325267683462326833116598420950938179",
"303855810784359905657086906803144814681",
"19642233341739342455331457094249227014",
"108539305001974887994550686192326518464",
"167729265614314314223683620861694599210",
"236559202629989049185175575506258726288",
"261729958931252712675749187762528998502",
"85746300986046817953103111515947307375"
],
"threshold": 0.9
},
"source": "https://gitlab.com/wireshark/wireshark@3ff940652962c099b73ae3233322b8697b0d10ab",
"id": "CVE-2020-26575-a07a3ccc",
"signature_version": "v1",
"target": {
"file": "epan/dissectors/packet-fbzero.c"
},
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"length": 3926.0,
"function_hash": "250592286267834778127219217177861522819"
},
"source": "https://gitlab.com/wireshark/wireshark@3ff940652962c099b73ae3233322b8697b0d10ab",
"id": "CVE-2020-26575-b80faad3",
"signature_version": "v1",
"target": {
"function": "dissect_fb_zero_tag",
"file": "epan/dissectors/packet-fbzero.c"
},
"signature_type": "Function",
"deprecated": false
}
]
}