cbcvebase.
CVE-2021-4181
published 2021-12-30

CVE-2021-4181: Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

Affected

18 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debianwireshark< wireshark 3.6.2-1 (bookworm)wireshark 3.6.2-1 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
msrccbl2_wireshark_3.4.14-1_on_cbl_mariner_2.0
msrccbl_mariner_2.0_arm
msrccbl_mariner_2.0_x64
oraclehttp_server
oraclehttp_server
oraclezfs_storage_appliance_kit
wiresharkwireshark
wiresharkwireshark>= 0 < 3.4.16-0+deb11u13.4.16-0+deb11u1
wiresharkwireshark>= 0 < 3.6.2-13.6.2-1
wiresharkwireshark>= 0 < 3.6.2-13.6.2-1
wiresharkwireshark>= 0 < 3.6.2-13.6.2-1
wiresharkwireshark>= 3.4.0 < 3.4.113.4.11
wireshark_foundationwireshark
wireshark_foundationwireshark

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH