CVE-2020-26575: Debian Linux

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of offset advancement.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 32 only; version 33 only
• Oracle ZFS Storage Appliance Firmware: version 8.8 only
• Wireshark Wireshark: up to and including 3.2.7

Published 2020-10-06. Last modified 2026-06-17.