CVE-2020-15466: High severity wireshark vulnerability
In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-15466?
CVE-2020-15466 is a vulnerability in Wireshark 3.2.0 to 3.2.4 that could cause the GVCP dissector to go into an infinite loop.
How does the GVCP dissector vulnerability in Wireshark impact me?
The GVCP dissector vulnerability in Wireshark could potentially lead to an infinite loop, which may cause denial of service or crash the application.
How can I fix the Wireshark GVCP dissector vulnerability (CVE-2020-15466)?
To fix the Wireshark GVCP dissector vulnerability, you need to update to version 3.2.5-1 or later on Ubuntu or version 2.6.20-0+deb10u4 or later on Debian.
Where can I find more information about CVE-2020-15466?
You can find more information about CVE-2020-15466 on the official Wireshark bugzilla page, the code review page, and the Wireshark security advisory page.