Description
In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan/dissectors/packet-wassp.c by using >= and <= to resolve off-by-one errors.
References (8)
Scores
CVSS v3
7.5
EPSS
0.0066
EPSS Percentile
71.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-125
CWE-193
Status
published
Products (7)
fedoraproject/fedora
30
fedoraproject/fedora
31
fedoraproject/fedora
32
opensuse/leap
15.1
oracle/solaris
11
oracle/zfs_storage_appliance_kit
8.8
wireshark/wireshark
3.2.0 - 3.2.1
Published
Jan 16, 2020
Tracked Since
Feb 18, 2026