CVE-2020-9429: Null Pointer Dereference
First published: Thu Feb 27 2020(Updated: )
In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wireshark Wireshark | >=3.2.0<=3.2.1 | |
| openSUSE Leap | =15.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394
- https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=73c5fff899f253c44a72657048aec7db6edee571
- https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a2530f740d67d41908e84434bb5ec99480c2ac2e
- https://security.gentoo.org/glsa/202007-13
- https://www.wireshark.org/security/wnpa-sec-2020-06.html
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a2530f740d67d41908e84434bb5ec99480c2ac2e
- https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=73c5fff899f253c44a72657048aec7db6edee571
Frequently Asked Questions
What is the vulnerability ID for Wireshark version 3.2.0 to 3.2.1?
The vulnerability ID is CVE-2020-9429.
What is the severity level of CVE-2020-9429?
The severity level of CVE-2020-9429 is high with a CVSS score of 7.5.
How can the WireGuard dissector crash vulnerability be fixed in Wireshark?
The WireGuard dissector crash vulnerability in Wireshark can be fixed by updating to a version where it has been addressed, such as version 3.2.2 and above.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/event
- agent/tags
- agent/first-publish-date
- agent/description
- agent/source
- vendor/wireshark
- canonical/wireshark wireshark
- version/wireshark wireshark/3.2.0
- version/wireshark wireshark/3.2.1
- vendor/opensuse
- canonical/opensuse leap
- version/opensuse leap/15.1