CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to...

4.2 MediumFix available

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: None
Availability: Low

Exploit likelihood

2.55%Up 0.5 points since Apr 14, 2021

What each source reports

CVE List Score used 4.2

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Record: CVE-2020-26421
CVSS 3.1: 4.2 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
Updated: 2026-11-02

EUVDEUVD-2020-18968 4.2

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Record: EUVD-2020-18968
CVSS 3.1: 4.2 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
Updated: 2026-11-03

GitHub AdvisoriesGHSA-955v-hqm3-9444 5.3

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to...

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Record: GHSA-955v-hqm3-9444
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-125
Updated: 2026-11-02

NVD 4.2

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Record: CVE-2020-26421
CVSS 3.1: 4.2 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-125
Updated: 2026-11-02

OSVALPINE-CVE-2020-26421 5.3

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Record: ALPINE-CVE-2020-26421
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-03

OSV 5.3

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Record: CVE-2020-26421
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

Show 7 moreShow less

OSVDEBIAN-CVE-2020-26421 5.3

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Record: DEBIAN-CVE-2020-26421
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVUBUNTU-CVE-2020-26421 4.2

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Record: UBUNTU-CVE-2020-26421
CVSS 3.1: 4.2 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVopenSUSE-SU-2021:0909-1 No score

Security update for wireshark, libvirt, sbc, libqt5-qtmultimedia

This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:

Update wireshark to version 3.4.5

New and updated support and bug fixes for multiple protocols
Asynchronous DNS resolution is always enabled
Protobuf fields can be dissected as Wireshark (header) fields
UI improvements

Including security fixes for:

CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
CVE-2020-26422: QUIC dissector crash (bsc#1180232)
CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
CVE-2020-26421: USB HID dissector crash (bsc#1179933)
CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)

libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.

Record: openSUSE-SU-2021:0909-1
Updated: 2026-11-02

OSVopenSUSE-SU-2021:2125-1 No score

Security update for wireshark

This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:

Update wireshark to version 3.4.5

New and updated support and bug fixes for multiple protocols
Asynchronous DNS resolution is always enabled
Protobuf fields can be dissected as Wireshark (header) fields
UI improvements

Including security fixes for:

CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
CVE-2020-26422: QUIC dissector crash (bsc#1180232)
CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
CVE-2020-26421: USB HID dissector crash (bsc#1179933)
CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)

libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.

Record: openSUSE-SU-2021:2125-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11513-1 No score

libwireshark14-3.4.8-1.2 on GA media

These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11513-1
Updated: 2026-11-02

OSVSUSE-SU-2021:2125-1 No score

Security update for wireshark

This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:

Update wireshark to version 3.4.5

New and updated support and bug fixes for multiple protocols
Asynchronous DNS resolution is always enabled
Protobuf fields can be dissected as Wireshark (header) fields
UI improvements

Including security fixes for:

CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
CVE-2020-26422: QUIC dissector crash (bsc#1180232)
CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
CVE-2020-26421: USB HID dissector crash (bsc#1179933)
CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)

libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.

Record: SUSE-SU-2021:2125-1
Updated: 2026-11-02

OSVSUSE-SU-2024:3323-1 No score

Security update for wireshark

This update for wireshark fixes the following issues:

CVE-2024-8250: Fixed NTLMSSP dissector crash (bsc#1229907).
CVE-2020-26421: Fixed USB HID dissector crash (bsc#1179933).

Record: SUSE-SU-2024:3323-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`wireshark` Alpine:v3.12	3.2.0 up to 3.2.9-r0	3.2.9-r0
`wireshark` Alpine:v3.13	3.2.0 up to 3.4.1-r0	3.4.1-r0
`wireshark` Alpine:v3.14	3.2.0 up to 3.4.1-r0	3.4.1-r0
`wireshark` Alpine:v3.15	3.2.0 up to 3.4.1-r0	3.4.1-r0
`wireshark` Alpine:v3.16	3.2.0 up to 3.4.1-r0	3.4.1-r0
`wireshark` Alpine:v3.17	3.2.0 up to 3.4.1-r0	3.4.1-r0
`wireshark` Alpine:v3.18	3.2.0 up to 3.4.1-r0	3.4.1-r0
`wireshark` Alpine:v3.19	3.2.0 up to 3.4.1-r0	3.4.1-r0
`wireshark` Alpine:v3.20	3.2.0 up to 3.4.1-r0	3.4.1-r0
`wireshark` Alpine:v3.21	3.2.0 up to 3.4.1-r0	3.4.1-r0

Show 65 moreShow less

Affected packages
Package	Affected	Fixed
`wireshark` Alpine:v3.22	3.2.0 up to 3.4.1-r0	3.4.1-r0
`wireshark` Alpine:v3.23	3.2.0 up to 3.4.1-r0	3.4.1-r0
`wireshark` Alpine:v3.24	3.2.0 up to 3.4.1-r0	3.4.1-r0
`wireshark` Debian:12	before 3.4.1-1	3.4.1-1
`wireshark` Debian:13	before 3.4.1-1	3.4.1-1
`wireshark` Debian:14	before 3.4.1-1	3.4.1-1
`wireshark` Debian:9 From an advisory covering 17 CVEs	before 2.6.20-0+deb9u1, plus listed versions 2.2.6+g32dac6a-22.2.6+g32dac6a-2+deb9u12.2.6+g32dac6a-2+deb9u22.2.6+g32dac6a-2+deb9u32.2.7-1 Show 24 moreShow less 2.4.0-12.4.1-12.4.2-12.4.3-12.4.4-12.4.5-12.4.6-12.6.1-12.6.10-12.6.2-12.6.2-22.6.3-12.6.3-1~deb9u12.6.4-12.6.4-22.6.5-12.6.5-1~deb9u12.6.6-12.6.7-12.6.7-1~deb9u12.6.8-12.6.8-1.12.6.8-1.1~deb9u12.6.9-1	2.6.20-0+deb9u1
`sbc` SUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`sbc` SUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`sbc` SUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`sbc` SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libvirt` SUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs	before 4.0.0-9.37.21	4.0.0-9.37.21
`sbc` SUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libvirt` SUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs	before 4.0.0-9.37.21	4.0.0-9.37.21
`sbc` SUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libqt5-qtmultimedia` SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs	before 5.9.7-7.2.1	5.9.7-7.2.1
`sbc` SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libqt5-qtmultimedia` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs	before 5.9.7-7.2.1	5.9.7-7.2.1
`sbc` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libvirt` SUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs	before 4.0.0-9.37.21	4.0.0-9.37.21
`sbc` SUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libqt5-qtmultimedia` SUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs	before 5.9.7-7.2.1	5.9.7-7.2.1
`sbc` SUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libqt5-qtmultimedia` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs	before 5.9.7-7.2.1	5.9.7-7.2.1
`sbc` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libvirt` SUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs	before 4.0.0-9.37.21	4.0.0-9.37.21
`sbc` SUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libqt5-qtmultimedia` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs	before 5.9.7-7.2.1	5.9.7-7.2.1
`sbc` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libqt5-qtmultimedia` SUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs	before 5.9.7-7.2.1	5.9.7-7.2.1
`sbc` SUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libqt5-qtmultimedia` SUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs	before 5.9.7-7.2.1	5.9.7-7.2.1
`sbc` SUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libqt5-qtmultimedia` SUSE:Manager Server 4.0 From an advisory covering 9 CVEs	before 5.9.7-7.2.1	5.9.7-7.2.1
`sbc` SUSE:Manager Server 4.0 From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Manager Server 4.0 From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`libqt5-qtmultimedia` SUSE:Enterprise Storage 6 From an advisory covering 9 CVEs	before 5.9.7-7.2.1	5.9.7-7.2.1
`sbc` SUSE:Enterprise Storage 6 From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` SUSE:Enterprise Storage 6 From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`wireshark` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs	before 2.4.16-48.57.1	2.4.16-48.57.1
`wireshark` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs	before 2.4.16-48.57.1	2.4.16-48.57.1
`wireshark` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs	before 2.4.16-48.57.1	2.4.16-48.57.1
`wireshark` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less 1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3	None known
`wireshark` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 8 moreShow less 2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2	None known
`wireshark` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 7 moreShow less 2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2	None known
`wireshark` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2	None known
`wireshark` openSUSE:Leap 15.2 From an advisory covering 9 CVEs	before 3.4.5-lp152.2.12.1	3.4.5-lp152.2.12.1
`sbc` openSUSE:Leap 15.3 From an advisory covering 9 CVEs	before 1.3-3.2.1	1.3-3.2.1
`wireshark` openSUSE:Leap 15.3 From an advisory covering 9 CVEs	before 3.4.5-3.53.1	3.4.5-3.53.1
`wireshark` openSUSE:Tumbleweed From an advisory covering 163 CVEs	before 3.4.8-1.2	3.4.8-1.2

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	aliases, products	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-26421 is a medium vulnerability (CVSS 4.2) in The Wireshark Foundation Wireshark, published December 11, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.55%, the 85th percentile. Fixed in wireshark 3.2.9-r0.

References

Show 191 moreShow less