Bug 1828780 (CVE-2020-9429)

Summary: CVE-2020-9429 wireshark: WireGuard dissector could crash due to NULL pointer dereference
Product: [Other] Security Response Reporter: Marian Rehak <mrehak>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED NOTABUG QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: denis, huzaifas, lemenkov, mruprich, msehnout, peter, rvokal, sergey.avseyev
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: wireshark 3.2.2 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-09-24 08:41:06 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1828781    
Bug Blocks: 1814638    

Description Marian Rehak 2020-04-28 10:43:00 UTC
The WireGuard dissector could crash due to mishandling the situation where a certain data structure intentionally has a NULL value in epan/dissectors/packet-wireguard.c.

Comment 1 Marian Rehak 2020-04-28 10:44:08 UTC
Created wireshark tracking bugs for this issue:

Affects: fedora-all [bug 1828781]

Comment 2 Marian Rehak 2020-04-28 10:46:25 UTC
Upstream Issue:

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16394

Comment 3 Riccardo Schirone 2020-09-24 08:25:51 UTC
WireGuard dissector was added in wireshark 3.0.0,  https://github.com/wireshark/wireshark/commit/f9c9af55278666ccc76e06e936bc243d82cb7317

Comment 4 Riccardo Schirone 2020-09-24 08:25:57 UTC
Statement:

This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 5, 6, 7, and 8 as they did not include support for WireGuard.

Comment 5 Product Security DevOps Team 2020-09-24 08:41:06 UTC
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2020-9429