CVE Vulnerabilities

CVE-2020-26575

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Oct 06, 2020 | Modified: Nov 07, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Wireshark Wireshark * 3.2.7 (including)
Wireshark Ubuntu bionic *
Wireshark Ubuntu esm-apps/bionic *
Wireshark Ubuntu esm-apps/focal *
Wireshark Ubuntu esm-apps/xenial *
Wireshark Ubuntu esm-infra-legacy/trusty *
Wireshark Ubuntu focal *
Wireshark Ubuntu groovy *
Wireshark Ubuntu trusty *
Wireshark Ubuntu trusty/esm *
Wireshark Ubuntu xenial *

References