UBUNTU-CVE-2020-15466

In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.

References

Affected packages

Ubuntu:Pro:20.04:LTS / wireshark

Package

Name: wireshark
Purl: pkg:deb/ubuntu/wireshark@3.2.3-1ubuntu0.1~esm1?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.2.3-1ubuntu0.1~esm1

Affected versions

3.*

3.0.5-1

3.0.7-1

3.2.1-1

3.2.2-1

3.2.3-1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "libwireshark-data",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "libwireshark-dev",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "libwireshark13",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "libwiretap-dev",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "libwiretap10",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "libwsutil-dev",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "libwsutil11",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "tshark",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "wireshark",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "wireshark-common",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "wireshark-dev",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "wireshark-gtk",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        },
        {
            "binary_name": "wireshark-qt",
            "binary_version": "3.2.3-1ubuntu0.1~esm1"
        }
    ]
}