CVE-2021-22222: High severity Wireshark Wireshark vulnerability
Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/wiresharkto a version that resolves this vulnerability.Fixed in 2.6.20-0+deb10u4Fixed in 2.6.20-0+deb10u7Fixed in 3.4.10-0+deb11u1Fixed in 4.0.6-1~deb12u1Fixed in 4.0.10-1 - Upgrade
Upgrade
alpine/wiresharkto a version that resolves this vulnerability.Fixed in 3.4.6-r0
Event History
Frequently Asked Questions
What is CVE-2021-22222?
CVE-2021-22222 is a vulnerability in the DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 that allows denial of service via packet injection or crafted capture file.
How does CVE-2021-22222 impact Wireshark?
CVE-2021-22222 can cause Wireshark to enter an infinite loop, resulting in a denial of service.
What is the severity of CVE-2021-22222?
CVE-2021-22222 has a severity score of 7.5 (high).
Which versions of Wireshark are affected by CVE-2021-22222?
Wireshark versions 3.4.0 to 3.4.5 are affected by CVE-2021-22222.
How can I fix CVE-2021-22222?
To fix CVE-2021-22222, update Wireshark to version 3.4.6 or later.