What’s Vulnerable › Vulnerabilities

CVE-2020-26421

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-12-11 · updated 2026-06-17
• Weakness: CWE-125

Description

Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Affected products

• Debian Linux: 9.0
• Fedoraproject Fedora: 32, 33
• Oracle Corporation Oracle ZFS Storage Appliance Kit: 8.8
• Wireshark Foundation Wireshark: from 3.2.0 through 3.2.8; 3.4.0

References

• https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26421.json
• https://gitlab.com/wireshark/wireshark/-/issues/16958
• https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M75HYXU36SP6GHIDPHNZGJKEO6TX4C4Y/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YHWDZPWQJMLK64VFDWJC5SEGPNH6Y72Z/
• https://security.gentoo.org/glsa/202101-12
• https://www.oracle.com/security-alerts/cpuApr2021.html
• https://www.wireshark.org/security/wnpa-sec-2020-17.html
• https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26421.json
• https://gitlab.com/wireshark/wireshark/-/issues/16958
• https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M75HYXU36SP6GHIDPHNZGJKEO6TX4C4Y/

Get alerted when CVE-2020-26421 or the next vulnerability affects your stack