{"id":"CVE-2020-7045","aliases":["ALPINE-CVE-2020-7045","DEBIAN-CVE-2020-7045","DLA-2547-1","EUVD-2020-28179","GHSA-hx2c-xvp4-cgw4","MGASA-2020-0044","UBUNTU-CVE-2020-7045"],"status":"published","title":"In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan...","description":"In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01457,"percentile":0.73689,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476","CWE-74"],"published":"2020-01-16T03:07:27Z","modified":"2026-11-03T06:32:26Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"wireshark","fixed_in":["3.0.8-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"wireshark","fixed_in":["3.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wireshark","fixed_in":["3.2.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wireshark","fixed_in":["3.2.0-1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"wireshark","fixed_in":["3.0.8-1.mga7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.0.8-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.20-0+deb9u1"}]}],"versions":["2.2.6+g32dac6a-2","2.2.6+g32dac6a-2+deb9u1","2.2.6+g32dac6a-2+deb9u2","2.2.6+g32dac6a-2+deb9u3","2.2.7-1","2.4.0-1","2.4.1-1","2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1","2.4.6-1","2.6.1-1","2.6.10-1","2.6.2-1","2.6.2-2","2.6.3-1","2.6.3-1~deb9u1","2.6.4-1","2.6.4-2","2.6.5-1","2.6.5-1~deb9u1","2.6.6-1","2.6.7-1","2.6.7-1~deb9u1","2.6.8-1","2.6.8-1.1","2.6.8-1.1~deb9u1","2.6.9-1"],"bundled":17},{"source":"osv","ecosystem":"Mageia:7","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-1.mga7"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.2-1","1.10.3-1","1.10.5-1ubuntu1","1.10.5-2","1.10.6-1","1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.1","2.6.3-1~ubuntu14.04.1","2.6.4-2~ubuntu14.04.1","2.6.5-1~ubuntu14.04.1","2.6.6-1~ubuntu14.04.0","2.6.8-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm1","2.6.10-1~ubuntu14.04.0~esm2","2.6.10-1~ubuntu14.04.0~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.7+g7fc8978-1","1.12.8+g5b6e543-2","2.0.1+g59ea380-3build1","2.0.2+ga16e22e-1","2.2.6+g32dac6a-2ubuntu0.16.04","2.6.3-1~ubuntu16.04.1","2.6.4-2~ubuntu16.04.0","2.6.5-1~ubuntu16.04.0","2.6.6-1~ubuntu16.04.0","2.6.8-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0","2.6.10-1~ubuntu16.04.0+esm1","2.6.10-1~ubuntu16.04.0+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"wireshark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.2-1","2.4.3-1","2.4.4-1","2.4.5-1","2.6.3-1~ubuntu18.04.1","2.6.4-2~ubuntu18.04.0","2.6.5-1~ubuntu18.04.0","2.6.6-1~ubuntu18.04.0","2.6.8-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0","2.6.10-1~ubuntu18.04.0+esm1","2.6.10-1~ubuntu18.04.0+esm2"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"wireshark","product":"wireshark"}],"references":[{"url":"https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16258","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","fix","report"]},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=01f261de41f4dd3233ef578e5c0ffb9c25c7d14d","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2020-02.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7045"},{"url":"https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=01f261de41f4dd3233ef578e5c0ffb9c25c7d14d","tags":["report"]},{"url":"https://github.com/advisories/GHSA-hx2c-xvp4-cgw4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-7045","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-7045","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0044.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26091","tags":["report"]},{"url":"https://www.wireshark.org/security/wnpa-sec-2020-02","tags":["web"]},{"url":"https://www.wireshark.org/docs/relnotes/wireshark-3.0.8.html","tags":["web"]},{"url":"https://www.wireshark.org/news/20200115.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-7045","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7045","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-7045","description":"In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.","status":"published","published":"2020-01-16T03:07:27Z","modified":"2024-08-04T09:18:02.878Z","updated_at":"2026-11-02T14:35:58.787905Z"}],"euvd":[{"id":"EUVD-2020-28179","description":"In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.","status":"published","published":"2020-01-16T03:07:27Z","modified":"2024-08-04T09:18:02Z","updated_at":"2026-11-03T03:08:01.029528Z"}],"ghsa":[{"id":"GHSA-hx2c-xvp4-cgw4","title":"In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan...","description":"In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.","status":"published","published":"2022-05-24T17:06:49Z","modified":"2023-01-29T05:01:11Z","cwes":["CWE-74"],"updated_at":"2026-11-02T14:44:45.404949Z"}],"nvd":[{"id":"CVE-2020-7045","description":"In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.","status":"published","published":"2020-01-16T04:15:11.493Z","modified":"2026-06-17T03:24:11.42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":3.3,"vector":"AV:A/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:05:52.385274Z"}],"osv":[{"id":"ALPINE-CVE-2020-7045","description":"In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.","status":"published","published":"2020-01-16T04:15:11.493Z","modified":"2026-11-03T06:32:26.233662637Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"CVE-2020-7045","description":"In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.","status":"published","published":"2020-01-16T04:15:11.493Z","modified":"2026-10-24T10:31:01.428298293Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:17.34531Z"},{"id":"DEBIAN-CVE-2020-7045","description":"In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.","status":"published","published":"2020-01-16T04:15:11.493Z","modified":"2026-10-26T12:02:33.108436875Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"UBUNTU-CVE-2020-7045","description":"In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.","status":"published","published":"2020-01-16T04:15:00Z","modified":"2026-04-22T12:43:20.576021Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"DLA-2547-1","title":"wireshark - security update","status":"published","published":"2021-02-06T00:00:00Z","modified":"2026-03-09T01:18:08.523693Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2020-0044","title":"Updated wireshark packages fix security vulnerability","description":"Updated wireshark packages fix security vulnerability:\n\nBT ATT dissector crash (CVE-2020-7045).\n","status":"published","published":"2020-01-19T10:11:05Z","modified":"2026-04-16T04:42:46.574047947Z","updated_at":"2026-11-02T15:49:41.151324Z"}]}}