CVE-2021-22191
First published: Mon Mar 15 2021(Updated: )
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
Credit: cve@gitlab.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wireshark Wireshark | >=3.2.0<=3.2.11 | |
| Wireshark Wireshark | >=3.4.0<=3.4.3 | |
| Oracle Sun ZFS Storage Appliance Kit | =8.8 | |
| Debian GNU/Linux | =9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22191.json
- https://gitlab.com/wireshark/wireshark/-/issues/17232
- https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html
- https://security.gentoo.org/glsa/202107-21
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.wireshark.org/security/wnpa-sec-2021-03.html
Frequently Asked Questions
What is CVE-2021-22191?
CVE-2021-22191 is a vulnerability in Wireshark versions 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 that could allow remote code execution through packet injection or crafted capture file.
How does CVE-2021-22191 affect Wireshark?
CVE-2021-22191 affects Wireshark versions 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 by allowing remote code execution via packet injection or crafted capture file.
What is the severity of CVE-2021-22191?
CVE-2021-22191 has a severity rating of 8.8 (high).
How can I fix CVE-2021-22191 in Wireshark?
To fix CVE-2021-22191 in Wireshark, update to versions 3.4.4 or 3.2.12 which contain the necessary security patches.
Are there any references for CVE-2021-22191?
Yes, you can find references for CVE-2021-22191 at the following URLs: [reference1], [reference2], [reference3].
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/remedy
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/wireshark
- canonical/wireshark wireshark
- version/wireshark wireshark/3.2.0
- version/wireshark wireshark/3.2.11
- version/wireshark wireshark/3.4.0
- version/wireshark wireshark/3.4.3
- vendor/oracle
- canonical/oracle sun zfs storage appliance kit
- version/oracle sun zfs storage appliance kit/8.8
- vendor/debian
- canonical/debian gnu/linux
- version/debian gnu/linux/9.0