CVE-2020-13164: High severity wireshark vulnerability
In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this Wireshark vulnerability?
The vulnerability ID is CVE-2020-13164.
What is the severity of CVE-2020-13164?
The severity of CVE-2020-13164 is high with a CVSS score of 7.5.
How does the NFS dissector vulnerability in Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16 occur?
The vulnerability occurs due to a crash in the NFS dissector when encountering excessive recursion, such as for a cycle in the directory graph on a filesystem.
Is there a fix available for CVE-2020-13164 in Wireshark?
Yes, the vulnerability was addressed in the following versions of Wireshark: 3.2.4-1, 2.6.10-1~ubuntu18.04.0+, 3.2.3-1ubuntu0.1~, 2.6.10-1~ubuntu14.04.0~, and 2.6.10-1~ubuntu16.04.0+.
Where can I find more information about CVE-2020-13164?
More information about CVE-2020-13164 can be found at the following references: [Link 1](https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16476), [Link 2](https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=e6e98eab8e5e0bbc982cfdc808f2469d7cab6c5a), [Link 3](https://www.wireshark.org/security/wnpa-sec-2020-08.html).