CVE-2020-28030
HIGHWireshark 3.2.0-3.2.7 - Denial of Service in GQUIC Dissector
Title source: llmDescription
In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan/dissectors/packet-gquic.c by correcting the implementation of offset advancement.
References (6)
Core 6
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://gitlab.com/wireshark/wireshark/-/issues/16887
Vendor Advisory x_refsource_misc
https://www.wireshark.org/security/wnpa-sec-2020-15.html
Patch, Third Party Advisory x_refsource_misc
https://gitlab.com/wireshark/wireshark/-/commit/b287e7165e8aa89cde6ae37e7c257c5d87d16b9b
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHZSVK7PO2LTGFQXFHFXY6SOMSQ7UPRS/
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2667E6WKVE56G66BVBVD7LJPIDOJ7K3/
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
Scores
CVSS v3
7.5
EPSS
0.0204
EPSS Percentile
78.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-682
CWE-770
CWE-835
Status
published
Products (4)
debian/debian_linux
9.0
fedoraproject/fedora
32
fedoraproject/fedora
33
wireshark/wireshark
3.2.0 - 3.2.7
Published
Nov 02, 2020
Tracked Since
Feb 18, 2026