OSV-2020-2227

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wireshark/OSV-2020-2227.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-2227
Published
2020-12-04T00:00:30.414831Z
Modified
2023-02-24T02:37:08.122111Z
Summary
Heap-buffer-overflow in ieeeNUMBER_fragment_hash
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28191

Crash type: Heap-buffer-overflow READ 6
Crash state:
ieeeNUMBER_fragment_hash
g_hash_table_insert_internal
fragment_add_seq_common
References

Affected packages

OSS-Fuzz / wireshark

Package

Name
wireshark
Purl
pkg:generic/wireshark

Affected ranges

Type
GIT
Repo
https://gitlab.com/wireshark/wireshark.git
Events

Affected versions

v3.*

v3.3.0
v3.3.1
v3.3.1rc0
v3.3.2rc0
v3.4.0
v3.4.0rc0
v3.4.0rc1
v3.4.1
v3.4.10
v3.4.10rc0
v3.4.11
v3.4.11rc0
v3.4.12
v3.4.12rc0
v3.4.13
v3.4.13rc0
v3.4.14
v3.4.14rc0
v3.4.15
v3.4.15rc0
v3.4.16
v3.4.16rc0
v3.4.17rc0
v3.4.1rc0
v3.4.2
v3.4.2rc0
v3.4.3
v3.4.3rc0
v3.4.4
v3.4.4rc0
v3.4.5
v3.4.5rc0
v3.4.6
v3.4.6rc0
v3.4.7
v3.4.7rc0
v3.4.8
v3.4.8rc0
v3.4.9
v3.4.9rc0
v3.5.0rc0

wireshark-3.*

wireshark-3.4.0
wireshark-3.4.1
wireshark-3.4.10
wireshark-3.4.11
wireshark-3.4.12
wireshark-3.4.13
wireshark-3.4.14
wireshark-3.4.15
wireshark-3.4.16
wireshark-3.4.2
wireshark-3.4.3
wireshark-3.4.4
wireshark-3.4.5
wireshark-3.4.6
wireshark-3.4.7
wireshark-3.4.8
wireshark-3.4.9

Ecosystem specific

{
    "severity": "MEDIUM"
}