CVE-2020-26420
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...
3.1 LowFix available
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
2.75%Up 0.9 points since Apr 14, 2021
What each source reports
CVE List Score used
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
CVE-2020-26420- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
EUVDEUVD-2020-18967
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
EUVD-2020-18967- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rvp4-jqj8-p5fq
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
GHSA-rvp4-jqj8-p5fq- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-401
- Updated
- 2026-11-02
NVD
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
CVE-2020-26420- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-401
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-26420
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
ALPINE-CVE-2020-26420- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
OSV
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
CVE-2020-26420- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2020-26420
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
DEBIAN-CVE-2020-26420- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-26420
Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
UBUNTU-CVE-2020-26420- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0909-1 No score
Security update for wireshark, libvirt, sbc, libqt5-qtmultimedia
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
openSUSE-SU-2021:0909-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:2125-1 No score
Security update for wireshark
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
openSUSE-SU-2021:2125-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11513-1 No score
libwireshark14-3.4.8-1.2 on GA media
These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11513-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:2125-1 No score
Security update for wireshark
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
SUSE-SU-2021:2125-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.12 |
3.2.0 up to 3.2.9-r0 | 3.2.9-r0 |
wiresharkAlpine:v3.13 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.14 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.15 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.16 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.17 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.18 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.19 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.20 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.21 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
Show 58 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.22 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.23 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.24 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkDebian:12 |
before 3.4.1-1 | 3.4.1-1 |
wiresharkDebian:13 |
before 3.4.1-1 | 3.4.1-1 |
wiresharkDebian:14 |
before 3.4.1-1 | 3.4.1-1 |
sbcSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
wiresharkUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2 |
None known |
wiresharkopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 3.4.5-lp152.2.12.1 | 3.4.5-lp152.2.12.1 |
sbcopenSUSE:Leap 15.3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkopenSUSE:Leap 15.3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 163 CVEs |
before 3.4.8-1.2 | 3.4.8-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-26420 is a low vulnerability (CVSS 3.1) in The Wireshark Foundation Wireshark, published December 11, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. Fixed in wireshark 3.2.9-r0.
References
wireshark.org/security/wnpa-sec-2020-18.html
gitlab.com/wireshark/wireshark/-/issues/16994
security.gentoo.org/glsa/202101-12
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHWDZPWQJMLK64VFDWJC5SEGPNH6Y72Z
Show 187 moreShow less
oracle.com/security-alerts/cpuApr2021.html
nvd.nist.gov/vuln/detail/CVE-2020-26420
github.com/advisories/GHSA-rvp4-jqj8-p5fq
security.alpinelinux.org/vuln/CVE-2020-26420
security-tracker.debian.org/tracker/CVE-2020-26420
suse.com/support/update/announcement/2021/suse-su-20212125-1
bugzilla.suse.com/1179930
ubuntu.com/security/CVE-2020-26420
cve.org/CVERecord?id=CVE-2020-26420
lists.opensuse.org/archives/list/[email protected]/thread/QDSEUP77D5HE3ISH2VMQR2GIAFH6DLQK