CVE-2020-9431: 
Wireshark vulnerability analysis and mitigation

CVE-2020-9431 is a memory leak vulnerability discovered in Wireshark's LTE RRC dissector. The vulnerability affects Wireshark versions 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14. The issue was discovered by the OSS-Fuzz project and publicly disclosed on February 26, 2020 (Wireshark Advisory).

The vulnerability exists in the LTE RRC (Radio Resource Control) dissector component of Wireshark, specifically in the file epan/dissectors/packet-lte-rrc.c. The issue involves memory leaks during certain append operations in the dissector. The problem was addressed by adjusting these append operations in the affected code (CVE Mitre).

When exploited, this vulnerability could cause Wireshark to consume excessive CPU resources. This can occur either through injection of malformed packets onto the network or by convincing a user to open a malformed packet trace file (Wireshark Advisory).

The vulnerability was fixed in Wireshark versions 3.2.2, 3.0.9, and 2.6.15. Users are advised to upgrade to these or later versions to mitigate the issue. No temporary workarounds were provided for this vulnerability (Wireshark Advisory).