Published: 05/07/2020 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

An infinite loop has been found in the GVCP dissector of Wireshark prior to 3.2.5. It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark
opensuse leap 15.1
opensuse leap 15.2
debian debian linux 9.0

An infinite loop has been found in the GVCP dissector of Wireshark before 325 It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file ...

CWE-835 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16029 https://www.wireshark.org/security/wnpa-sec-2020-09.html https://security.gentoo.org/glsa/202007-13 http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.html http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00038.html https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=11f40896b696e4e8c7f8b2ad96028404a83a51a4 https://nvd.nist.gov https://security.archlinux.org/CVE-2020-15466

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-15466

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect