Stack-based buffer overflow in Wireshark - CVE-2020-11647

Vulnerability identifier: #VU26746

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-11647

CWE-ID: CWE-121

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing data in BACapp dissector. A remote attacker can send specially crafted data via the network, trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Wireshark
Gentoo Linux
Arch Linux
Opensuse
openEuler
wireshark (Alpine package)
wireshark
wireshark-debuginfo
wireshark-debugsource
wireshark-devel
wireshark-help

Install updates from vendor's website.

Wireshark - addressed in versions 2.6.16, 3.0.10, 3.2.3
wireshark (Alpine package) - update to 3.0.10-r0
wireshark - update to 2.6.2-7
wireshark-debuginfo - update to 2.6.2-7
wireshark-debugsource - update to 2.6.2-7
wireshark-devel - update to 2.6.2-7
wireshark-help - update to 2.6.2-7

• https://www.wireshark.org/security/wnpa-sec-2020-07.html
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16474

• Buffer overflow in Wireshark BACapp dissector
• Arch Linux update for wireshark-cli
• Gentoo update for Wireshark
• OpenSUSE Linux update for wireshark
• OpenSUSE Linux update for wireshark
• Stack-based buffer overflow in wireshark (Alpine package)
• openEuler 20.03 LTS update for wireshark-2.6.2-7