PT-2021-14915

CVE-2021-22207

·

Published

2021-04-23

·

Updated

2024-06-15

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.2.0 through 3.2.12 Wireshark versions 3.4.0 through 3.4.4
Description: The issue is related to excessive memory consumption in the MS-WSP dissector, which can lead to denial of service. This can be achieved via packet injection or by using a crafted capture file.
Recommendations: For Wireshark versions 3.2.0 through 3.2.12, update to a version that fixes the issue. For Wireshark versions 3.4.0 through 3.4.4, update to a version that fixes the issue. As a temporary workaround, consider disabling the MS-WSP dissector until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2021-1721
ALT-PU-2021-1737
ALT-PU-2022-1368
AZL-7405
DLA-2849-1
DSA-5019-1
MGASA-2021-0222
OESA-2022-1610
OPENSUSE-SU-2021:0909-1
OPENSUSE-SU-2021_0909-1
OPENSUSE-SU-2021:2125-1
OPENSUSE-SU-2021_2125-1
OPENSUSE-SU-2024:11513-1
SUSE-SU-2021:2125-1
Found an issue in the description? Have something to add? Feel free to write us 👾