WID-SEC-W-2022-1471

DeutschShown in its original language — a full translation is planned for a future version.

Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2021-12-29

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Wireshark ausnutzen, um einen Denial of Service Angriff durchzuführen.

describes (7)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-4190US	high7.5	3.33% (89th)	—	2021-12-30
Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file
CVE-2021-4186US	high7.5	2.31% (83rd)	—	2021-12-30
Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
CVE-2021-4185US	high7.5	4.06% (91st)	—	2021-12-30
Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
CVE-2021-4184US	high7.5	4.06% (91st)	—	2021-12-30
Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
CVE-2021-4183US	medium5.5	1.53% (75th)	—	2021-12-30
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
CVE-2021-4182US	high7.5	3.45% (89th)	—	2021-12-30
Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
CVE-2021-4181US	high7.5	4.06% (91st)	—	2021-12-30
Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.