CVE-2020-26419: 
Wireshark vulnerability analysis and mitigation

CVE-2020-26419 is a security vulnerability discovered in Wireshark 3.4.0 that involves memory leaks in the dissection engine. The vulnerability was disclosed on December 9, 2020, and affects the packet analysis functionality of Wireshark. The issue was fixed in version 3.4.1 (Wireshark Advisory).

The vulnerability is characterized by memory leaks in multiple dissectors within Wireshark's dissection engine. It received a CVSS v3.1 Base Score of 5.3 (MEDIUM) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L according to NVD assessment. The vulnerability is classified under CWE-401 (Missing Release of Memory after Effective Lifetime) (NVD).

The vulnerability could allow attackers to cause a denial of service condition by making Wireshark consume excessive CPU resources. This can be triggered either through packet injection on a network or by convincing a user to open a maliciously crafted capture file (Wireshark Advisory).

The vulnerability can be exploited remotely without requiring authentication. Exploitation can be achieved through two methods: by injecting malformed packets onto the network or by convincing a user to read a malformed packet trace file (Wireshark Advisory, NVD).

The primary mitigation is to upgrade to Wireshark version 3.4.1 or later, which contains the fix for this vulnerability. Various Linux distributions have also released security updates to address this issue, including Fedora and Gentoo (Fedora Update, Gentoo Advisory).