CVE-2020-13164

In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem.

• CWE-674

• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00038.htmlMailing List, Third Party Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16476Issue Tracking, Patch, Vendor Advisory
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e6e98eab8e5e0bbc982cfdc808f2469d7cab6c5a
• https://lists.debian.org/debian-lts-announce/2021/02/msg00008.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5UOISPQTRCZGQLKBVXEDL72AEXEHS425/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DNV3EYL4JBWCR22TJO3PH7ADUVS5RWSU/
• https://security.gentoo.org/glsa/202007-13Third Party Advisory
• https://www.wireshark.org/security/wnpa-sec-2020-08.htmlVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00038.htmlMailing List, Third Party Advisory
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16476Issue Tracking, Patch, Vendor Advisory
• https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e6e98eab8e5e0bbc982cfdc808f2469d7cab6c5a
• https://lists.debian.org/debian-lts-announce/2021/02/msg00008.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5UOISPQTRCZGQLKBVXEDL72AEXEHS425/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DNV3EYL4JBWCR22TJO3PH7ADUVS5RWSU/
• https://security.gentoo.org/glsa/202007-13Third Party Advisory
• https://www.wireshark.org/security/wnpa-sec-2020-08.htmlVendor Advisory

Published

May 19, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-13158Artica Proxy before 4.30.000000 Community Edition allows Dir…7.5
• CVE-2020-13159Artica Proxy before 4.30.000000 Community Edition allows OS …9.8
• CVE-2020-1316An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-13160AnyDesk before 5.5.3 on Linux and FreeBSD has a format strin…9.8
• CVE-2020-13162A time-of-check time-of-use vulnerability in PulseSecureServ…7
• CVE-2020-13163em-imap 0.5 uses the library eventmachine in an insecure way…7.4
• CVE-2020-13166The management tool in MyLittleAdmin 3.8 allows remote attac…9.8
• CVE-2020-13167Netsweeper through 6.4.3 allows unauthenticated remote code …9.8
• CVE-2020-13168SysAid 20.1.11b26 allows reflected XSS via the ForgotPasswor…6.1
• CVE-2020-13169Stored XSS (Cross-Site Scripting) exists in the SolarWinds O…9
• CVE-2020-1317An elevation of privilege vulnerability exists when Group Po…8.8
• CVE-2020-13170HashiCorp Consul and Consul Enterprise did not appropriately…7.5