CVE-2020-25862

Source
https://cve.org/CVERecord?id=CVE-2020-25862
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25862.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-25862
Downstream
Related
Published
2020-10-06T15:15:15.273Z
Modified
2026-07-08T05:53:49.849523670Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In Wireshark 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the TCP dissector could crash. This was addressed in epan/dissectors/packet-tcp.c by changing the handling of the invalid 0xFFFF checksum.

Database specific
{
    "unresolved_ranges": [
        {
            "vendor_product": "debian:debian_linux",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "extracted_events": [
                {
                    "introduced": "9.0"
                },
                {
                    "last_affected": "9.0"
                }
            ]
        },
        {
            "vendor_product": "fedoraproject:fedora",
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "31"
                },
                {
                    "last_affected": "31"
                },
                {
                    "introduced": "32"
                },
                {
                    "last_affected": "32"
                },
                {
                    "introduced": "33"
                },
                {
                    "last_affected": "33"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "vendor_product": "opensuse:leap",
            "cpes": [
                "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
                "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "extracted_events": [
                {
                    "introduced": "15.1"
                },
                {
                    "last_affected": "15.1"
                },
                {
                    "introduced": "15.2"
                },
                {
                    "last_affected": "15.2"
                }
            ]
        },
        {
            "vendor_product": "oracle:zfs_storage_appliance_firmware",
            "cpes": [
                "cpe:2.3:o:oracle:zfs_storage_appliance_firmware:8.8:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "extracted_events": [
                {
                    "introduced": "8.8"
                },
                {
                    "last_affected": "8.8"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://github.com/wireshark/wireshark
Events
Database specific
{
    "cpe": "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.6.0"
        },
        {
            "last_affected": "2.6.20"
        },
        {
            "introduced": "3.0.0"
        },
        {
            "last_affected": "3.0.13"
        },
        {
            "introduced": "3.2.0"
        },
        {
            "last_affected": "3.2.6"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v2.*
v2.6.0
v2.6.1
v2.6.10
v2.6.10rc0
v2.6.11
v2.6.11rc0
v2.6.12
v2.6.12rc0
v2.6.13
v2.6.13rc0
v2.6.14
v2.6.14rc0
v2.6.15
v2.6.15rc0
v2.6.16
v2.6.16rc0
v2.6.17
v2.6.17rc0
v2.6.18
v2.6.18rc0
v2.6.19
v2.6.19rc0
v2.6.1rc0
v2.6.2
v2.6.20
v2.6.20rc0
v2.6.2rc0
v2.6.3
v2.6.3rc0
v2.6.4
v2.6.4rc0
v2.6.5
v2.6.5rc0
v2.6.6
v2.6.6rc0
v2.6.7
v2.6.7rc0
v2.6.8
v2.6.8rc0
v2.6.9
v2.6.9rc0
v3.*
v3.0.0
v3.0.1
v3.0.10
v3.0.10rc0
v3.0.11
v3.0.11rc0
v3.0.12
v3.0.12rc0
v3.0.13
v3.0.13rc0
v3.0.1rc0
v3.0.2
v3.0.2rc0
v3.0.3
v3.0.3rc0
v3.0.4
v3.0.4rc0
v3.0.5
v3.0.5rc0
v3.0.6
v3.0.6rc0
v3.0.7
v3.0.7rc0
v3.0.8
v3.0.8rc0
v3.0.9
v3.0.9rc0
v3.2.0
v3.2.1
v3.2.1rc0
v3.2.2
v3.2.2rc0
v3.2.3
v3.2.3rc0
v3.2.4
v3.2.4rc0
v3.2.5
v3.2.5rc0
v3.2.6
v3.2.6rc0
wireshark-2.*
wireshark-2.6.0
wireshark-2.6.1
wireshark-2.6.10
wireshark-2.6.11
wireshark-2.6.12
wireshark-2.6.13
wireshark-2.6.14
wireshark-2.6.15
wireshark-2.6.16
wireshark-2.6.17
wireshark-2.6.18
wireshark-2.6.19
wireshark-2.6.2
wireshark-2.6.20
wireshark-2.6.3
wireshark-2.6.4
wireshark-2.6.5
wireshark-2.6.6
wireshark-2.6.7
wireshark-2.6.8
wireshark-2.6.9
wireshark-3.*
wireshark-3.0.0
wireshark-3.0.1
wireshark-3.0.10
wireshark-3.0.11
wireshark-3.0.12
wireshark-3.0.13
wireshark-3.0.2
wireshark-3.0.3
wireshark-3.0.4
wireshark-3.0.5
wireshark-3.0.6
wireshark-3.0.7
wireshark-3.0.8
wireshark-3.0.9
wireshark-3.2.0
wireshark-3.2.1
wireshark-3.2.2
wireshark-3.2.3
wireshark-3.2.4
wireshark-3.2.5
wireshark-3.2.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25862.json"

Git / gitlab.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://gitlab.com/wireshark/wireshark
Events
Database specific
{
    "cpe": "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.6.0"
        },
        {
            "last_affected": "2.6.20"
        },
        {
            "introduced": "3.0.0"
        },
        {
            "last_affected": "3.0.13"
        },
        {
            "introduced": "3.2.0"
        },
        {
            "last_affected": "3.2.6"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v2.*
v2.6.0
v2.6.1
v2.6.10
v2.6.10rc0
v2.6.11
v2.6.11rc0
v2.6.12
v2.6.12rc0
v2.6.13
v2.6.13rc0
v2.6.14
v2.6.14rc0
v2.6.15
v2.6.15rc0
v2.6.16
v2.6.16rc0
v2.6.17
v2.6.17rc0
v2.6.18
v2.6.18rc0
v2.6.19
v2.6.19rc0
v2.6.1rc0
v2.6.2
v2.6.20
v2.6.20rc0
v2.6.2rc0
v2.6.3
v2.6.3rc0
v2.6.4
v2.6.4rc0
v2.6.5
v2.6.5rc0
v2.6.6
v2.6.6rc0
v2.6.7
v2.6.7rc0
v2.6.8
v2.6.8rc0
v2.6.9
v2.6.9rc0
v3.*
v3.0.0
v3.0.1
v3.0.10
v3.0.10rc0
v3.0.11
v3.0.11rc0
v3.0.12
v3.0.12rc0
v3.0.13
v3.0.13rc0
v3.0.14rc0
v3.0.1rc0
v3.0.2
v3.0.2rc0
v3.0.3
v3.0.3rc0
v3.0.4
v3.0.4rc0
v3.0.5
v3.0.5rc0
v3.0.6
v3.0.6rc0
v3.0.7
v3.0.7rc0
v3.0.8
v3.0.8rc0
v3.0.9
v3.0.9rc0
v3.2.0
v3.2.1
v3.2.1rc0
v3.2.2
v3.2.2rc0
v3.2.3
v3.2.3rc0
v3.2.4
v3.2.4rc0
v3.2.5
v3.2.5rc0
v3.2.6
v3.2.6rc0
wireshark-2.*
wireshark-2.6.0
wireshark-2.6.1
wireshark-2.6.10
wireshark-2.6.11
wireshark-2.6.12
wireshark-2.6.13
wireshark-2.6.14
wireshark-2.6.15
wireshark-2.6.16
wireshark-2.6.17
wireshark-2.6.18
wireshark-2.6.19
wireshark-2.6.2
wireshark-2.6.20
wireshark-2.6.3
wireshark-2.6.4
wireshark-2.6.5
wireshark-2.6.6
wireshark-2.6.7
wireshark-2.6.8
wireshark-2.6.9
wireshark-3.*
wireshark-3.0.0
wireshark-3.0.1
wireshark-3.0.10
wireshark-3.0.11
wireshark-3.0.12
wireshark-3.0.13
wireshark-3.0.2
wireshark-3.0.3
wireshark-3.0.4
wireshark-3.0.5
wireshark-3.0.6
wireshark-3.0.7
wireshark-3.0.8
wireshark-3.0.9
wireshark-3.2.0
wireshark-3.2.1
wireshark-3.2.2
wireshark-3.2.3
wireshark-3.2.4
wireshark-3.2.5
wireshark-3.2.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25862.json"