[ GLSA 202008-14 ] Wireshark

[GLSA]

Gentoo Linux Security Advisory

Title: Wireshark: Denial of service (GLSA 202008-14)
Severity: normal
Exploitable: local, remote
Date: 2020-08-26
Bug(s): #736914
ID: 202008-14

Synopsis

A vulnerability in Wireshark could lead to a Denial of Service
condition.


Background

Wireshark is a network protocol analyzer formerly known as ethereal.

Affected Packages

Package: net-analyzer/wireshark
Vulnerable: < 3.2.6
Unaffected: >= 3.2.6
Architectures: All supported architectures


Description

A double free error was discovered in Wireshark’s Kafka dissector.

Impact

A remote attacker could exploit these vulnerabilities by sending a
malformed packet or enticing a user to read a malformed packet trace
file, causing a Denial of Service.


Workaround

There is no known workaround at this time.

Resolution

All Wireshark users should upgrade to the latest version: