wnpa-sec-2020-01 · WASSP dissector crash

Summary

Name: WASSP dissector crash

Docid: wnpa-sec-2020-01

Date: January 15, 2020

Affected versions: 3.2.0

Fixed versions: 3.2.1

References:
Wireshark issue 16324
CVE-2020-7044

Details

Description

The WASSP dissector could crash.

Impact

It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

Resolution

Upgrade to Wireshark 3.2.1 or later.