Wireshark: Denial of service A vulnerability in Wireshark could lead to a Denial of Service condition. wireshark 2020-08-26 2020-08-26 736914 local, remote 3.2.6 3.2.6

Wireshark is a network protocol analyzer formerly known as ethereal.

A double free error was discovered in Wireshark’s Kafka dissector.

A remote attacker could exploit these vulnerabilities by sending a malformed packet or enticing a user to read a malformed packet trace file, causing a Denial of Service.

There is no known workaround at this time.

All Wireshark users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-3.2.6" CVE-2020-17498 sam_c sam_c