CVE-2021-22191: High severity wireshark vulnerability

Q: What is CVE-2021-22191?

CVE-2021-22191 is a vulnerability in Wireshark versions 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 that could allow remote code execution through packet injection or crafted capture file.

Q: How does CVE-2021-22191 affect Wireshark?

CVE-2021-22191 affects Wireshark versions 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 by allowing remote code execution via packet injection or crafted capture file.

Q: What is the severity of CVE-2021-22191?

CVE-2021-22191 has a severity rating of 8.8 (high).

Q: How can I fix CVE-2021-22191 in Wireshark?

To fix CVE-2021-22191 in Wireshark, update to versions 3.4.4 or 3.2.12 which contain the necessary security patches.

Q: Are there any references for CVE-2021-22191?

Yes, you can find references for CVE-2021-22191 at the following URLs: [reference1], [reference2], [reference3].

Published Mar 15, 2021

Updated

Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.

Affected Software

4 affected components

Wireshark Wireshark>=3.2.0<=3.2.11

Wireshark Wireshark>=3.4.0<=3.4.3

Oracle ZFS Storage Appliance=8.8

Debian Debian Linux=9.0

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuApr2021.html

Event History

Mar 15, 2021

CVE Published

via MITRE·05:48 PM

Data Sourced

via MITRE·05:48 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-22191?

CVE-2021-22191 is a vulnerability in Wireshark versions 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 that could allow remote code execution through packet injection or crafted capture file.

How does CVE-2021-22191 affect Wireshark?

CVE-2021-22191 affects Wireshark versions 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 by allowing remote code execution via packet injection or crafted capture file.

What is the severity of CVE-2021-22191?