{"id":"CVE-2020-26575","aliases":["ALPINE-CVE-2020-26575","DEBIAN-CVE-2020-26575","DLA-2547-1","EUVD-2020-19120","GHSA-vw2j-3xrw-2q58","OESA-2021-1076","SUSE-SU-2020:3376-1","UBUNTU-CVE-2020-26575","openSUSE-SU-2020:2076-1","openSUSE-SU-2020:2107-1","openSUSE-SU-2024:11513-1"],"status":"published","title":"In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an...","description":"In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.03116,"percentile":0.87922,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2020-10-06T14:57:03Z","modified":"2026-11-03T06:32:25Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"wireshark","fixed_in":["3.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"wireshark","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"wireshark","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"wireshark","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"wireshark","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"wireshark","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"wireshark","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"wireshark","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"wireshark","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"wireshark","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"wireshark","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"wireshark","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"wireshark","fixed_in":["3.4.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"wireshark","fixed_in":["3.2.8-0.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["3.2.8-0.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["3.2.8-0.1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS","package":"wireshark","fixed_in":["2.6.2-18.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"wireshark","fixed_in":["2.6.2-18.oe1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8-0.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8-0.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8-0.1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.20-0+deb9u1"}]}],"versions":["2.2.6+g32dac6a-2","2.2.6+g32dac6a-2+deb9u1","2.2.6+g32dac6a-2+deb9u2","2.2.6+g32dac6a-2+deb9u3","2.2.7-1","2.4.0-1","2.4.1-1","2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1","2.4.6-1","2.6.1-1","2.6.10-1","2.6.2-1","2.6.2-2","2.6.3-1","2.6.3-1~deb9u1","2.6.4-1","2.6.4-2","2.6.5-1","2.6.5-1~deb9u1","2.6.6-1","2.6.7-1","2.6.7-1~deb9u1","2.6.8-1","2.6.8-1.1","2.6.8-1.1~deb9u1","2.6.9-1"],"bundled":17},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-18.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-18.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8-3.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8-3.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8-3.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8-3.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.2-1","1.10.3-1","1.10.5-1ubuntu1","1.10.5-2","1.10.6-1","1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1","2.6.3-1~ubuntu14.04.1","2.6.4-2~ubuntu14.04.1","2.6.5-1~ubuntu14.04.1","2.6.6-1~ubuntu14.04.0","2.6.8-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm2","2.6.10-1~ubuntu14.04.0~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.7+g7fc8978-1","1.12.8+g5b6e543-2","2.0.1+g59ea380-3build1","2.0.2+ga16e22e-1","2.2.6+g32dac6a-2ubuntu0.16.04","2.6.3-1~ubuntu16.04.1","2.6.4-2~ubuntu16.04.0","2.6.5-1~ubuntu16.04.0","2.6.6-1~ubuntu16.04.0","2.6.8-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0+esm1","2.6.10-1~ubuntu16.04.0+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1","2.6.3-1~ubuntu18.04.1","2.6.4-2~ubuntu18.04.0","2.6.5-1~ubuntu18.04.0","2.6.6-1~ubuntu18.04.0","2.6.8-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0+esm1","2.6.10-1~ubuntu18.04.0+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.5-1","3.0.7-1","3.2.1-1","3.2.2-1","3.2.3-1","3.2.3-1ubuntu0.1~esm1","3.2.3-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8-lp152.2.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8-lp151.2.18.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-1.2"}]}],"bundled":163}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"oracle","product":"zfs_storage_appliance_firmware"},{"vendor":"wireshark","product":"wireshark"}],"references":[{"url":"https://gitlab.com/wireshark/wireshark/-/issues/16887","tags":["x_refsource_MISC","x_transferred","Broken Link","report"]},{"url":"https://gitlab.com/wireshark/wireshark/-/merge_requests/467","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://gitlab.com/wireshark/wireshark/-/merge_requests/471","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://gitlab.com/wireshark/wireshark/-/merge_requests/472","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://gitlab.com/wireshark/wireshark/-/merge_requests/473","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://gitlab.com/wireshark/wireshark/-/commit/3ff940652962c099b73ae3233322b8697b0d10ab","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://security.gentoo.org/glsa/202011-08","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHZSVK7PO2LTGFQXFHFXY6SOMSQ7UPRS/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2667E6WKVE56G66BVBVD7LJPIDOJ7K3/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2020-14.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26575","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UHZSVK7PO2LTGFQXFHFXY6SOMSQ7UPRS/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V2667E6WKVE56G66BVBVD7LJPIDOJ7K3/"},{"url":"https://github.com/advisories/GHSA-vw2j-3xrw-2q58"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-26575","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-26575","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1076","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203376-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1177406","tags":["report"]},{"url":"https://bugzilla.suse.com/1178291","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28030","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-26575","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26575","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5P4NEYKGIIBUWVHMTUJCIGGFEUIWBFC7/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7DRKIYJDZYHG7KXDJ3T5Y3UU4KEC2QGD/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-5740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22235","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-26575","description":"In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.","status":"published","published":"2020-10-06T14:57:03Z","modified":"2024-08-04T15:56:04.593Z","updated_at":"2026-11-02T14:35:46.129376Z"}],"euvd":[{"id":"EUVD-2020-19120","description":"In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.","status":"published","published":"2020-10-06T14:57:03Z","modified":"2024-08-04T15:56:04Z","updated_at":"2026-11-03T03:07:15.15938Z"}],"ghsa":[{"id":"GHSA-vw2j-3xrw-2q58","title":"In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an...","description":"In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.","status":"published","published":"2022-05-24T17:30:12Z","modified":"2023-01-29T05:04:16Z","cwes":["CWE-835"],"updated_at":"2026-11-02T14:45:30.813688Z"}],"nvd":[{"id":"CVE-2020-26575","description":"In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.","status":"published","published":"2020-10-06T15:15:15.553Z","modified":"2026-06-17T03:08:13.763Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:06:17.70091Z"}],"osv":[{"id":"ALPINE-CVE-2020-26575","description":"In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.","status":"published","published":"2020-10-06T15:15:15.553Z","modified":"2026-11-03T06:32:25.023803777Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"CVE-2020-26575","description":"In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.","status":"published","published":"2020-10-06T15:15:15.553Z","modified":"2026-10-24T14:22:44.363138762Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-26575","description":"In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.","status":"published","published":"2020-10-06T15:15:15.553Z","modified":"2026-10-26T12:02:40.990060285Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"OESA-2021-1076","title":"wireshark security update","description":"Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer.  Wireshark, formerly known as Ethereal, can be used to examine the details of traffic at a variety of levels ranging from connection-level information to the bits that make up a single packet. Packet capture can provide a network administrator with information about individual packets such as transmit time, source, destination, protocol type and header data. This information can be useful for evaluating security events and troubleshooting network security device issues.\r\n\r\nSecurity Fix(es):\r\n\r\nIn Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.(CVE-2020-26575)","status":"published","published":"2021-03-05T11:04:18Z","modified":"2026-08-18T01:15:21.330543151Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2020-26575","description":"In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.","status":"published","published":"2020-10-06T15:15:00Z","modified":"2026-04-22T12:36:33.705569Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"DLA-2547-1","title":"wireshark - security update","status":"published","published":"2021-02-06T00:00:00Z","modified":"2026-03-09T01:18:08.523693Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"openSUSE-SU-2020:2076-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\n- wireshark was updated to 3.2.8:\n  - CVE-2020-26575: Fixed an issue where FBZERO dissector was entering in infinite loop (bsc#1177406)\n  - CVE-2020-28030: Fixed an issue where GQUIC dissector was crashing (bsc#1178291)\n  * Infinite memory allocation while parsing this tcp packet\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-27T09:28:05Z","modified":"2026-02-04T02:53:39.201812Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:2107-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\n- wireshark was updated to 3.2.8:\n  - CVE-2020-26575: Fixed an issue where FBZERO dissector was entering in infinite loop (bsc#1177406)\n  - CVE-2020-28030: Fixed an issue where GQUIC dissector was crashing (bsc#1178291)\n  * Infinite memory allocation while parsing this tcp packet\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-29T11:30:29Z","modified":"2026-02-04T02:16:16.646095Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:11513-1","title":"libwireshark14-3.4.8-1.2 on GA media","description":"These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:58:40.825311Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2020:3376-1","title":"Security update for wireshark","description":"This update for wireshark fixes the following issues:\n\n- wireshark was updated to 3.2.8:\n  - CVE-2020-26575: Fixed an issue where FBZERO dissector was entering in infinite loop (bsc#1177406)\n  - CVE-2020-28030: Fixed an issue where GQUIC dissector was crashing (bsc#1178291)\n  * Infinite memory allocation while parsing this tcp packet\n","status":"published","published":"2020-11-19T08:29:31Z","modified":"2026-02-04T03:49:06.885435Z","updated_at":"2026-11-02T15:53:48.11786Z"}]}}