CVE-2021-4185

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.4.0 through 3.4.10 Wireshark version 3.6.0

Description The issue is related to an infinite loop in the RTMPT dissector, which can lead to a denial of service. This can be achieved via packet injection or a crafted capture file. A remote attacker can exploit this issue by sending specially crafted packets, resulting in a denial of service.

Recommendations For Wireshark versions 3.4.0 through 3.4.10, consider disabling the RTMPT dissector as a temporary workaround until a patch is available. For Wireshark version 3.6.0, consider disabling the RTMPT dissector as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.