The vulnerability of the BACapp sniffer, a traffic analyzer for computer networks by Wireshark, allows a hacker to execute arbitrary code.

The BACapp sniffer and scanner in Wireshark have a vulnerability that lets remote attackers execute arbitrary code.

Reporter	Title	Published	Views	Family All 54
ALT Linux	Security fix for the ALT Linux 9 package wireshark version 3.2.3-alt1	14 Apr 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package wireshark version 3.2.3-alt1	14 Apr 202000:00	–	altlinux
AlpineLinux	CVE-2020-11647	10 Apr 202020:16	–	alpinelinux
ArchLinux	[ASA-202004-10] wireshark-cli: arbitrary code execution	9 Apr 202000:00	–	archlinux
AstraLinux	Astra Linux – Vulnerability in Wireshark	19 Jun 202611:10	–	astralinux
Circl	CVE-2020-11647	14 Apr 202009:14	–	circl
CNVD	Wireshark BACapp dissector injection vulnerability	13 Apr 202000:00	–	cnvd
CVE	CVE-2020-11647	10 Apr 202020:16	–	cve
Cvelist	CVE-2020-11647	10 Apr 202020:16	–	cvelist
Debian	[SECURITY] [DLA 2547-1] wireshark security update	6 Feb 202120:32	–	debian

Vulners

Node

wireshark wiresharkRange2.6.0–2.6.15

wireshark wiresharkRange3.0.0–3.0.9

wireshark wiresharkRange3.2.0–3.2.2

Source	Link
bugs	www.bugs.wireshark.org/bugzilla/show_bug.cgi
security	www.security.gentoo.org/glsa/202007-13
code	www.code.wireshark.org/review/gitweb
wireshark	www.wireshark.org/security/wnpa-sec-2020-07.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-08/msg00038.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-11647
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-11647
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
altsp	www.altsp.su/obnovleniya-bezopasnosti/

24 Sep 2024 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 38.8

CVSS 210

EPSS0.03322