PT-2021-14915
CVE-2021-22207
·
Published
2021-04-23
·
Updated
2024-06-15
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Wireshark versions 3.2.0 through 3.2.12
Wireshark versions 3.4.0 through 3.4.4
Description:
The issue is related to excessive memory consumption in the MS-WSP dissector, which can lead to denial of service. This can be achieved via packet injection or by using a crafted capture file.
Recommendations:
For Wireshark versions 3.2.0 through 3.2.12, update to a version that fixes the issue.
For Wireshark versions 3.4.0 through 3.4.4, update to a version that fixes the issue.
As a temporary workaround, consider disabling the MS-WSP dissector until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾