CVE-2020-11647

In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion.

• CWE-674

• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.htmlMailing List, Patch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00038.htmlMailing List, Patch, Third Party Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16474Issue Tracking, Vendor Advisory
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6f56fc9496db158218243ea87e3660c874a0bab0
• https://lists.debian.org/debian-lts-announce/2021/02/msg00008.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202007-13Third Party Advisory
• https://www.wireshark.org/security/wnpa-sec-2020-07.htmlVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.htmlMailing List, Patch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00038.htmlMailing List, Patch, Third Party Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16474Issue Tracking, Vendor Advisory
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=6f56fc9496db158218243ea87e3660c874a0bab0
• https://lists.debian.org/debian-lts-announce/2021/02/msg00008.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202007-13Third Party Advisory
• https://www.wireshark.org/security/wnpa-sec-2020-07.htmlVendor Advisory

Published

Apr 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11641A local file inclusion vulnerability in B&R SiteManager vers…6.5
• CVE-2020-11642The local file inclusion vulnerability present in B&R SiteMa…6.5
• CVE-2020-11643An information disclosure vulnerability in B&R GateManager 4…6.5
• CVE-2020-11644The information disclosure vulnerability present in B&R Gate…6.5
• CVE-2020-11645A denial of service vulnerability in B&R GateManager 4260 an…6.5
• CVE-2020-11646A log information disclosure vulnerability in B&R GateManage…4.3
• CVE-2020-11649An issue was discovered in GitLab CE and EE 8.15 through 12.…6.5
• CVE-2020-1165An elevation of privilege vulnerability exists when Windows …7.8
• CVE-2020-11650An issue was discovered in iXsystems FreeNAS (and TrueNAS) 1…7.5
• CVE-2020-11651An issue was discovered in SaltStack Salt before 2019.2.4 an…9.8
• CVE-2020-11652An issue was discovered in SaltStack Salt before 2019.2.4 an…6.5
• CVE-2020-11653An issue was discovered in Varnish Cache before 6.0.6 LTS, 6…7.5