CVE-2020-9430: Input Validation
Published Feb 27, 2020
·Updated
In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msgdlmap.c by validating a length field.
Affected Software
8 affected components
Wireshark Wireshark>=2.6.0<=2.6.14
Wireshark Wireshark>=3.0.0<=3.0.8
Wireshark Wireshark>=3.2.0<=3.2.1
Fedoraproject Fedora=30
Fedoraproject Fedora=31
Fedoraproject Fedora=32
openSUSE Leap=15.1
Debian Debian Linux=9.0
Remediation
Event History
Feb 27, 2020
CVE Published
via MITRE·10:06 PM
Data Sourced
via MITRE·10:06 PM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-9430?
CVE-2020-9430 has been assigned a medium severity rating due to potential crashes in Wireshark.
2
How do I fix CVE-2020-9430?
To fix CVE-2020-9430, upgrade Wireshark to version 3.2.2 or later.
3
Which versions of Wireshark are affected by CVE-2020-9430?
CVE-2020-9430 affects Wireshark versions 2.6.0 to 2.6.14, 3.0.0 to 3.0.8, and 3.2.0 to 3.2.1.
4
Is CVE-2020-9430 related to WiMax DLMAP dissector functionality?
Yes, CVE-2020-9430 concerns a vulnerability in the WiMax DLMAP dissector that could lead to crashes.
5
What should I do if I cannot upgrade Wireshark to fix CVE-2020-9430?
If you cannot upgrade, consider disabling the WiMax DLMAP dissector to mitigate the risk associated with CVE-2020-9430.