{"id":"CVE-2020-15466","aliases":["ALPINE-CVE-2020-15466","DEBIAN-CVE-2020-15466","DLA-2547-1","EUVD-2020-7459","GHSA-v3q7-57mp-77xp","SUSE-SU-2020:2144-1","UBUNTU-CVE-2020-15466","USN-6262-1","openSUSE-SU-2020:1188-1","openSUSE-SU-2020:1199-1","openSUSE-SU-2024:11513-1"],"status":"published","title":"In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was...","description":"In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03005,"percentile":0.87486,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2020-07-05T10:04:58Z","modified":"2026-11-03T06:32:36Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"wireshark","fixed_in":["3.2.5-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"wireshark","fixed_in":["3.2.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["3.2.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["3.2.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"wireshark","fixed_in":["3.2.3-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"3.2.5-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.20-0+deb9u1"}]}],"versions":["2.2.6+g32dac6a-2","2.2.6+g32dac6a-2+deb9u1","2.2.6+g32dac6a-2+deb9u2","2.2.6+g32dac6a-2+deb9u3","2.2.7-1","2.4.0-1","2.4.1-1","2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1","2.4.6-1","2.6.1-1","2.6.10-1","2.6.2-1","2.6.2-2","2.6.3-1","2.6.3-1~deb9u1","2.6.4-1","2.6.4-2","2.6.5-1","2.6.5-1~deb9u1","2.6.6-1","2.6.7-1","2.6.7-1~deb9u1","2.6.8-1","2.6.8-1.1","2.6.8-1.1~deb9u1","2.6.9-1"],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-3.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-3.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-3.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-3.38.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-1ubuntu0.1~esm1"}]}],"versions":["3.0.5-1","3.0.7-1","3.2.1-1","3.2.2-1","3.2.3-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.10-1~ubuntu14.04.0~esm2"}]}],"versions":["1.10.2-1","1.10.3-1","1.10.5-1ubuntu1","1.10.5-2","1.10.6-1","1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1","2.6.3-1~ubuntu14.04.1","2.6.4-2~ubuntu14.04.1","2.6.5-1~ubuntu14.04.1","2.6.6-1~ubuntu14.04.0","2.6.8-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.10-1~ubuntu16.04.0+esm1"}]}],"versions":["1.12.7+g7fc8978-1","1.12.8+g5b6e543-2","2.0.1+g59ea380-3build1","2.0.2+ga16e22e-1","2.2.6+g32dac6a-2ubuntu0.16.04","2.6.3-1~ubuntu16.04.1","2.6.4-2~ubuntu16.04.0","2.6.5-1~ubuntu16.04.0","2.6.6-1~ubuntu16.04.0","2.6.8-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.10-1~ubuntu18.04.0+esm1"}]}],"versions":["2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1","2.6.3-1~ubuntu18.04.1","2.6.4-2~ubuntu18.04.0","2.6.5-1~ubuntu18.04.0","2.6.6-1~ubuntu18.04.0","2.6.8-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-1ubuntu0.1~esm1"}]}],"versions":["3.0.5-1","3.0.7-1","3.2.1-1","3.2.2-1","3.2.3-1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-lp151.2.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-lp152.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-1.2"}]}],"bundled":163}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"opensuse","product":"leap"},{"vendor":"wireshark","product":"wireshark"}],"references":[{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16029","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2020-09.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=11f40896b696e4e8c7f8b2ad96028404a83a51a4","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202007-13","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00038.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15466"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=11f40896b696e4e8c7f8b2ad96028404a83a51a4","tags":["report"]},{"url":"https://github.com/advisories/GHSA-v3q7-57mp-77xp"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-15466","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-15466","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202144-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1169063","tags":["report"]},{"url":"https://bugzilla.suse.com/1171899","tags":["report"]},{"url":"https://bugzilla.suse.com/1173606","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15466","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-15466","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6262-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-17498","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25862","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25863","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HRX3HS4ABNMJ2CDSTPV7YRYUEDZ7JHXF/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T3R2OFDTARE6AEGK6YO7JR6IFUUG2Q7G/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22235","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-15466","description":"In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.","status":"published","published":"2020-07-05T10:04:58Z","modified":"2024-08-04T13:15:20.688Z","updated_at":"2026-11-02T14:35:50.228781Z"}],"euvd":[{"id":"EUVD-2020-7459","description":"In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.","status":"published","published":"2020-07-05T10:04:58Z","modified":"2024-08-04T13:15:20Z","updated_at":"2026-11-03T03:07:31.508652Z"}],"ghsa":[{"id":"GHSA-v3q7-57mp-77xp","title":"In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was...","description":"In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.","status":"published","published":"2022-05-24T17:22:23Z","modified":"2023-01-29T05:03:16Z","cwes":["CWE-835"],"updated_at":"2026-11-02T14:45:17.130191Z"}],"nvd":[{"id":"CVE-2020-15466","description":"In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.","status":"published","published":"2020-07-05T11:15:09.843Z","modified":"2026-06-17T02:56:41.297Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:06:08.145904Z"}],"osv":[{"id":"ALPINE-CVE-2020-15466","description":"In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.","status":"published","published":"2020-07-05T11:15:09.843Z","modified":"2026-11-03T06:32:36.317561638Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"CVE-2020-15466","description":"In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.","status":"published","published":"2020-07-05T11:15:09.843Z","modified":"2026-10-24T10:30:21.743942609Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:14.828228Z"},{"id":"DEBIAN-CVE-2020-15466","description":"In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.","status":"published","published":"2020-07-05T11:15:09.843Z","modified":"2026-10-26T12:01:29.767850757Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"UBUNTU-CVE-2020-15466","description":"In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.","status":"published","published":"2020-07-05T11:15:00Z","modified":"2026-04-22T12:19:48.366018Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"DLA-2547-1","title":"wireshark - security update","status":"published","published":"2021-02-06T00:00:00Z","modified":"2026-03-09T01:18:08.523693Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"openSUSE-SU-2020:1188-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\n- Wireshark to 3.2.5:\n  * CVE-2020-15466: GVCP dissector infinite loop (bsc#1173606)\n  * CVE-2020-13164: NFS dissector crash (bsc#1171899)\n  * CVE-2020-11647: The BACapp dissector could crash (bsc#1169063)\n- Further features, bug fixes and updated protocol support as listed in:\n  https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-08-12T10:21:52Z","modified":"2026-02-04T02:53:44.890013Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1199-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\n- Wireshark to 3.2.5:\n  * CVE-2020-15466: GVCP dissector infinite loop (bsc#1173606)\n  * CVE-2020-13164: NFS dissector crash (bsc#1171899)\n  * CVE-2020-11647: The BACapp dissector could crash (bsc#1169063)\n- Further features, bug fixes and updated protocol support as listed in:\n  https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-08-14T15:28:24Z","modified":"2025-05-07T18:11:19.435547Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:11513-1","title":"libwireshark14-3.4.8-1.2 on GA media","description":"These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:58:40.825311Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2020:2144-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\n- Wireshark to 3.2.5:\n  * CVE-2020-15466: GVCP dissector infinite loop (bsc#1173606)\n  * CVE-2020-13164: NFS dissector crash (bsc#1171899)\n  * CVE-2020-11647: The BACapp dissector could crash (bsc#1169063)\n- Further features, bug fixes and updated protocol support as listed in:\n  https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html\n","status":"published","published":"2020-08-06T09:08:14Z","modified":"2026-02-04T02:20:04.661437Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-6262-1","title":"wireshark vulnerabilities","description":"It was discovered that Wireshark did not properly handle certain\nNFS packages when certain configuration options were enabled.\nAn attacker could possibly use this issue to cause\nWireshark to crash, resulting in a denial of service. (CVE-2020-13164)\n\nIt was discovered that Wireshark did not properly handle certain GVCP\npackages. An attacker could possibly use this issue to cause\nWireshark to crash, resulting in a denial of service. This issue only\naffected Ubuntu 20.04 LTS. (CVE-2020-15466)\n\nIt was discovered that Wireshark did not properly handle certain\nKafka packages. An attacker could possibly use this issue to cause\nWireshark to crash, resulting in a denial of service. This issue only\naffected Ubuntu 20.04 LTS. (CVE-2020-17498)\n\nIt was discovered that Wireshark did not properly handle certain TCP\npackages containing an invalid 0xFFFF checksum. An attacker could\npossibly use this issue to cause Wireshark to crash, resulting in\na denial of service. (CVE-2020-25862)\n\nIt was discovered that Wireshark did not properly handle certain\nMIME packages containing invalid parts. An attacker could\npossibly use this issue to cause Wireshark to crash, resulting in\na denial of service. (CVE-2020-25863)\n","status":"published","published":"2023-07-31T08:24:50Z","modified":"2026-06-29T13:50:55.530446279Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}