Skip to content
OpenAdvisories
Unscored USN-6262-1 5 CVEs

wireshark vulnerabilities

Published Jul 31, 2023 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Wireshark did not properly handle certain
NFS packages when certain configuration options were enabled.
An attacker could possibly use this issue to cause
Wireshark to crash, resulting in a denial of service. (CVE-2020-13164)

It was discovered that Wireshark did not properly handle certain GVCP
packages. An attacker could possibly use this issue to cause
Wireshark to crash, resulting in a denial of service. This issue only
affected Ubuntu 20.04 LTS. (CVE-2020-15466)

It was discovered that Wireshark did not properly handle certain
Kafka packages. An attacker could possibly use this issue to cause
Wireshark to crash, resulting in a denial of service. This issue only
affected Ubuntu 20.04 LTS. (CVE-2020-17498)

It was discovered that Wireshark did not properly handle certain TCP
packages containing an invalid 0xFFFF checksum. An attacker could
possibly use this issue to cause Wireshark to crash, resulting in
a denial of service. (CVE-2020-25862)

It was discovered that Wireshark did not properly handle certain
MIME packages containing invalid parts. An attacker could
possibly use this issue to cause Wireshark to crash, resulting in
a denial of service. (CVE-2020-25863)

Fixed packages 4

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS wireshark 2.6.10-1~ubuntu14.04.0~esm2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS wireshark 2.6.10-1~ubuntu16.04.0+esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS wireshark 2.6.10-1~ubuntu18.04.0+esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS wireshark 3.2.3-1ubuntu0.1~esm1

Vulnerabilities 5

References

  • report
    https://ubuntu.com/security/CVE-2020-13164
  • report
    https://ubuntu.com/security/CVE-2020-15466
  • report
    https://ubuntu.com/security/CVE-2020-17498
  • report
    https://ubuntu.com/security/CVE-2020-25862
  • report
    https://ubuntu.com/security/CVE-2020-25863