Skip to content
Heist/ feed
Back to feed
MediumFix available

wireshark — security advisory

Type: advisorySources: OSVAdvisory ID: DEBIAN-CVE-2020-26421

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Products
wireshark
Affected versions
Not specified
Fixed versions
3.4.1-1
CVEs
CVE-2020-26421
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 13:44 UTC · Revision 1

Source evidence

DEBIAN-CVE-2020-26421

core-osv · Original source

Published 11 Dec 2020, 19:15 UTC

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

osv:DEBIAN-CVE-2020-26421

wireshark

Fixed versions: 3.4.1-1

wireshark

Fixed versions: 3.4.1-1

wireshark

Fixed versions: 3.4.1-1

Complete source record
{
  "id": "9831b6def551f1ca0a4a79813d4d9cbb288590f2eda12b3785a5334f1f46d9d7",
  "url": "https://osv.dev/vulnerability/DEBIAN-CVE-2020-26421",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "DEBIAN-CVE-2020-26421",
    "summary": "Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.",
    "evidence": "osv:DEBIAN-CVE-2020-26421",
    "products": [
      {
        "name": {
          "value": "wireshark",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.4.1-1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "wireshark",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.4.1-1",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "wireshark",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.4.1-1",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "DEBIAN-CVE-2020-26421",
      "aliases": [
        "DEBIAN-CVE-2020-26421"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.4.1-1"
                }
              ]
            }
          ],
          "package": {
            "name": "wireshark",
            "purl": "pkg:deb/debian/wireshark?arch=source&distro=bookworm",
            "ecosystem": "Debian:12"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-26421.json"
          },
          "ecosystem_specific": {
            "urgency": "not yet assigned"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.4.1-1"
                }
              ]
            }
          ],
          "package": {
            "name": "wireshark",
            "purl": "pkg:deb/debian/wireshark?arch=source&distro=trixie",
            "ecosystem": "Debian:13"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-26421.json"
          },
          "ecosystem_specific": {
            "urgency": "not yet assigned"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.4.1-1"
                }
              ]
            }
          ],
          "package": {
            "name": "wireshark",
            "purl": "pkg:deb/debian/wireshark?arch=source&distro=forky",
            "ecosystem": "Debian:14"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-26421.json"
          },
          "ecosystem_specific": {
            "urgency": "not yet assigned"
          }
        }
      ],
      "modified": "2026-10-26T12:02:40.952197184Z",
      "provider": "osv",
      "upstream": [
        "CVE-2020-26421"
      ],
      "references": [
        "https://security-tracker.debian.org/tracker/CVE-2020-26421"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2020-26421",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 452748,
  "published_at": "2020-12-11T19:15:12.357+00:00"
}