A vulnerability in Wireshark could lead to a Denial of Service condition.
|Package||net-analyzer/wireshark on all architectures|
|Affected versions||< 3.2.6|
|Unaffected versions||>= 3.2.6|
Wireshark is a network protocol analyzer formerly known as ethereal.
A double free error was discovered in Wireshark’s Kafka dissector.
A remote attacker could exploit these vulnerabilities by sending a malformed packet or enticing a user to read a malformed packet trace file, causing a Denial of Service.
There is no known workaround at this time.
All Wireshark users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/wireshark-3.2.6"
August 26, 2020
August 26, 2020: 1