CVE-2020-26418
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...
3.1 LowFix available
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
3.00%Up 0.9 points since Apr 14, 2021
What each source reports
CVE List Score used
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
CVE-2020-26418- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
EUVDEUVD-2020-18965
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
EUVD-2020-18965- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-63gq-cvv8-gc2g
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of...
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
GHSA-63gq-cvv8-gc2g- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-401
- Updated
- 2026-11-02
NVD
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
CVE-2020-26418- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-401
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-26418
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
ALPINE-CVE-2020-26418- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
OSV
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
CVE-2020-26418- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2020-26418
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
DEBIAN-CVE-2020-26418- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-26418
Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
- Record
UBUNTU-CVE-2020-26418- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0909-1 No score
Security update for wireshark, libvirt, sbc, libqt5-qtmultimedia
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
openSUSE-SU-2021:0909-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:2125-1 No score
Security update for wireshark
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
openSUSE-SU-2021:2125-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11513-1 No score
libwireshark14-3.4.8-1.2 on GA media
These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11513-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:2125-1 No score
Security update for wireshark
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
SUSE-SU-2021:2125-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.12 |
3.2.0 up to 3.2.9-r0 | 3.2.9-r0 |
wiresharkAlpine:v3.13 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.14 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.15 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.16 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.17 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.18 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.19 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.20 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.21 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
Show 62 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.22 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.23 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkAlpine:v3.24 |
3.2.0 up to 3.4.1-r0 | 3.4.1-r0 |
wiresharkDebian:12 |
before 3.4.1-1 | 3.4.1-1 |
wiresharkDebian:13 |
before 3.4.1-1 | 3.4.1-1 |
wiresharkDebian:14 |
before 3.4.1-1 | 3.4.1-1 |
wiresharkDebian:9 From an advisory covering 17 CVEs |
before 2.6.20-0+deb9u1, plus listed versions 2.2.6+g32dac6a-22.2.6+g32dac6a-2+deb9u12.2.6+g32dac6a-2+deb9u22.2.6+g32dac6a-2+deb9u32.2.7-1 Show 24 moreShow less2.4.0-12.4.1-12.4.2-12.4.3-12.4.4-12.4.5-12.4.6-12.6.1-12.6.10-12.6.2-12.6.2-22.6.3-12.6.3-1~deb9u12.6.4-12.6.4-22.6.5-12.6.5-1~deb9u12.6.6-12.6.7-12.6.7-1~deb9u12.6.8-12.6.8-1.12.6.8-1.1~deb9u12.6.9-1 |
2.6.20-0+deb9u1 |
sbcSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
wiresharkUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3 |
None known |
wiresharkUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 8 moreShow less2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 7 moreShow less2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2 |
None known |
wiresharkopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 3.4.5-lp152.2.12.1 | 3.4.5-lp152.2.12.1 |
sbcopenSUSE:Leap 15.3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkopenSUSE:Leap 15.3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 163 CVEs |
before 3.4.8-1.2 | 3.4.8-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-26418 is a low vulnerability (CVSS 3.1) in The Wireshark Foundation Wireshark, published December 11, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.00%, the 87th percentile. Fixed in wireshark 3.2.9-r0.
References
wireshark.org/security/wnpa-sec-2020-16.html
gitlab.com/wireshark/wireshark/-/issues/16739
security.gentoo.org/glsa/202101-12
lists.debian.org/debian-lts-announce/2021/02/msg00008.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHWDZPWQJMLK64VFDWJC5SEGPNH6Y72Z
Show 188 moreShow less
oracle.com/security-alerts/cpuApr2021.html
nvd.nist.gov/vuln/detail/CVE-2020-26418
github.com/advisories/GHSA-63gq-cvv8-gc2g
security.alpinelinux.org/vuln/CVE-2020-26418
security-tracker.debian.org/tracker/CVE-2020-26418
suse.com/support/update/announcement/2021/suse-su-20212125-1
bugzilla.suse.com/1179930
ubuntu.com/security/CVE-2020-26418
cve.org/CVERecord?id=CVE-2020-26418
lists.opensuse.org/archives/list/[email protected]/thread/QDSEUP77D5HE3ISH2VMQR2GIAFH6DLQK