CVE-2021-4181: High severity Wireshark Wireshark vulnerability
Published Dec 30, 2021
·Updated
Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
Affected Software
18 affected componentsFixes available
Wireshark Wireshark>=3.4.0<3.4.11
Wireshark Wireshark=3.6.0
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Debian Debian Linux=9.0
Oracle HTTP Server=12.2.1.3.0
Oracle HTTP Server=12.2.1.4.0
Oracle ZFS Storage Appliance Kit=8.8
alpine/wireshark>=3.4.0<3.4.13-r0
3.4.13-r0
alpine/wireshark>=3.4.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.4.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.4.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.4.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.4.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.4.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.4.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.4.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.4.0<3.4.11-r0
3.4.11-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/wiresharkto a version that resolves this vulnerability.Fixed in 3.4.13-r0 - Upgrade
Upgrade
alpine/wiresharkto a version that resolves this vulnerability.Fixed in 3.4.11-r0
Event History
Dec 30, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·10:15 PM
DescriptionSeverityAffected Software