CVE-2020-25866

In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not…

published October 6, 2020

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not uncompressed) messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03987 · 90.5th percentile
Published
2020-10-06T14:42Z
EPSS history
Timeline
  • 06 OCT 14:42Z
    In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed (not…
    cvelistv5