CVE-2020-26418: Debian Linux

Medium severity, CVSS 5.3. EPSS: 3% chance of exploitation in the next 30 days.

Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 32 only; version 33 only
• Oracle ZFS Storage Appliance Kit: version 8.8 only
• Wireshark Wireshark: from 3.2.0, up to and including 3.2.8; version 3.4.0 only

Published 2020-12-11. Last modified 2026-06-17.