2 matches found
CVE-2020-25866
In Wireshark 3.2.0 to 3.2.6 and 3.0.0 to 3.0.13, the BLIP protocol dissector has a NULL pointer dereference because a buffer was sized for compressed not uncompressed messages. This was addressed in epan/dissectors/packet-blip.c by allowing reasonable compression ratios and rejecting ZIP bombs...
8.7CVSS0.03987EPSS
SaveExploits1References15
PT-2020-5493
Name of the Vulnerable Software and Affected Versions Wireshark versions 3.0.0 through 3.0.13 Wireshark versions 3.2.0 through 3.2.6 Description The issue is related to a NULL pointer dereference in the BLIP protocol dissector due to a buffer being sized for compressed messages, not uncompressed...
7.8CVSS0.13838EPSS
SaveExploits7References203
20