CVE-2021-22173: High severity wireshark vulnerability
Published Feb 17, 2021
·Updated
Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
Affected Software
4 affected components
Wireshark Wireshark>=3.4.0<3.4.3
Fedoraproject Fedora=32
Fedoraproject Fedora=33
Oracle ZFS Storage Appliance=8.8
Remediation
Patch Available
Event History
Feb 17, 2021
CVE Published
via MITRE·02:26 PM
Data Sourced
via MITRE·02:26 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-22173?
CVE-2021-22173 is a memory leak vulnerability in the USB HID dissector in Wireshark 3.4.0 to 3.4.2.
2
How can this vulnerability be exploited?
This vulnerability can be exploited through packet injection or a crafted capture file.
3
What is the severity of CVE-2021-22173?
The severity of CVE-2021-22173 is high, with a CVSS score of 7.5.
4
Which software versions are affected by CVE-2021-22173?
Wireshark versions 3.4.0 to 3.4.2 and Fedora versions 32 and 33 are affected by CVE-2021-22173. Oracle ZFS Storage Appliance version 8.8 is also affected.
5
How can I fix CVE-2021-22173?
To fix CVE-2021-22173, update to Wireshark version 3.4.3 or later. For Fedora and Oracle ZFS Storage Appliance, follow the vendor's recommendations for patching or upgrading.