In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17498
Reference (s):
- FEDORA:FEDORA-2020-2981a0224d
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G7LO7DAPN33FL4JQ7DDPB76SIEFGMZSQ/
- FEDORA:FEDORA-2020-7f91f10f2b
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AII7UYDPNKYE75AZL45M6HAV2COP7F6S/
- GENTOO:GLSA-202008-14