CVE-2020-9429

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-9429
In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html Mailing List Third Party Advisory
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394 Issue Tracking Vendor Advisory
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=73c5fff899f253c44a72657048aec7db6edee571
https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a2530f740d67d41908e84434bb5ec99480c2ac2e
https://security.gentoo.org/glsa/202007-13 Third Party Advisory
https://www.wireshark.org/security/wnpa-sec-2020-06.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
History

07 Nov 2023, 03:26

Type Values Removed Values Added
References
  • {'url': 'https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=73c5fff899f253c44a72657048aec7db6edee571', 'name': 'https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=73c5fff899f253c44a72657048aec7db6edee571', 'tags': ['Patch', 'Vendor Advisory'], 'refsource': 'MISC'}
  • {'url': 'https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a2530f740d67d41908e84434bb5ec99480c2ac2e', 'name': 'https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=a2530f740d67d41908e84434bb5ec99480c2ac2e', 'tags': ['Patch', 'Vendor Advisory'], 'refsource': 'MISC'}
  • () https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=73c5fff899f253c44a72657048aec7db6edee571 -
  • () https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a2530f740d67d41908e84434bb5ec99480c2ac2e -

30 Dec 2021, 21:08

Type Values Removed Values Added
First Time Opensuse
Opensuse leap
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - Mailing List, Third Party Advisory
References (GENTOO) https://security.gentoo.org/glsa/202007-13 - (GENTOO) https://security.gentoo.org/glsa/202007-13 - Third Party Advisory
CPE cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Information

Published : 2020-02-27 23:15

Updated : 2023-12-10 13:13

NVD link : CVE-2020-9429

Mitre link : CVE-2020-9429

CVE.ORG link : CVE-2020-9429

JSON object : View

Products Affected

opensuse

  • leap

wireshark

  • wireshark
CWE
CWE-476

NULL Pointer Dereference