CVE-2020-25863

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash

published October 6, 2020

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This was addressed in epan/dissectors/packet-multipart.c by correcting the deallocation of invalid MIME parts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04918 · 92.1th percentile
Published
2020-10-06T14:43Z
EPSS history
Timeline
  • 06 OCT 14:43Z
    In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash
    cvelistv5