CVE-2021-4183: Medium severity wireshark vulnerability
Published Dec 30, 2021
·Updated
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
Affected Software
6 affected components
Wireshark Wireshark=3.6.0
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Oracle HTTP Server=12.2.1.3.0
Oracle HTTP Server=12.2.1.4.0
Oracle ZFS Storage Appliance Kit=8.8
Remediation
Patch Available
Patch Available
Event History
Dec 30, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-4183?
CVE-2021-4183 is a vulnerability in the pcapng file parser in Wireshark 3.6.0 that allows denial of service via crafted capture file.
2
How severe is CVE-2021-4183?
CVE-2021-4183 has a severity rating of medium (5.5).
3
Which software versions are affected by CVE-2021-4183?
Wireshark 3.6.0, Fedoraproject Fedora 34 and 35, Oracle HTTP Server 12.2.1.3.0 and 12.2.1.4.0, and Oracle ZFS Storage Appliance Kit 8.8 are affected by CVE-2021-4183.
4
How can the denial of service vulnerability be exploited in CVE-2021-4183?
The vulnerability in Wireshark 3.6.0 can be exploited by using a crafted capture file to crash the application.
5
Is there a fix available for CVE-2021-4183?
Yes, updating to a version of Wireshark that is not affected (after the vulnerability is fixed) will resolve the issue.