CVE-2021-4183
published 2021-12-30CVE-2021-4183: Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
PriorityP418medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
1.43%
70.0th percentile
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wireshark | < wireshark 3.6.2-1 (bookworm) | wireshark 3.6.2-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| chrome_chrome | — | — | |
| oracle | http_server | — | — |
| oracle | http_server | — | — |
| oracle | zfs_storage_appliance_kit | — | — |
| wireshark | wireshark | — | — |
| wireshark | wireshark | >= 0 < 3.6.2-1 | 3.6.2-1 |
| wireshark | wireshark | >= 0 < 3.6.2-1 | 3.6.2-1 |
| wireshark | wireshark | >= 0 < 3.6.2-1 | 3.6.2-1 |
| wireshark_foundation | wireshark | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Chrome
Stable Channel Update for Desktop: CVE-2022-4183
vendor_chrome·2022-11-29·CVSS 4.3
CVE-2022-4183 [MEDIUM] Stable Channel Update for Desktop: CVE-2022-4183
Stable Channel Update for Desktop
CVE-2022-4183: Insufficient policy enforcement in Popup Blocker. Reported by David Sievers on 2021-09-22 [$5000][ 1358647 ] Medium CVE-2022-4184: Insufficient policy enforcement in Autofill
Reported by Ahmed ElMasry on 2022-09-01 [$5000][ 1373025 ] Medium CVE-2022-4185: Inappropriate implementation in Navigation
Severity: medium
Red Hat
wireshark: pcapng file parser crash
vendor_redhat·2021-12-29·CVSS 5.5
CVE-2021-4183 [MEDIUM] CWE-20 wireshark: pcapng file parser crash
wireshark: pcapng file parser crash
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
A heap-buffer-overflow vulnerability was found in Wireshark. This flaw allows an attacker with local network access to pass specially crafted capture files, causing an application to halt or crash.
Package: wireshark (Red Hat Enterprise Linux 6) - Not affected
Package: wireshark (Red Hat Enterprise Linux 7) - Not affected
Package: wireshark (Red Hat Enterprise Linux 8) - Not affected
Package: wireshark (Red Hat Enterprise Linux 9) - Not affected
Debian
CVE-2021-4183: wireshark - Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via ...
vendor_debian·2021·CVSS 5.5
CVE-2021-4183 [MEDIUM] CVE-2021-4183: wireshark - Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via ...
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
Scope: local
bookworm: resolved (fixed in 3.6.2-1)
bullseye: resolved
forky: resolved (fixed in 3.6.2-1)
sid: resolved (fixed in 3.6.2-1)
trixie: resolved (fixed in 3.6.2-1)
GHSA
GHSA-88qr-cjgj-jggp: Crash in the pcapng file parser in Wireshark 3
ghsa_unreviewed·2021-12-31
CVE-2021-4183 [MEDIUM] CWE-125 GHSA-88qr-cjgj-jggp: Crash in the pcapng file parser in Wireshark 3
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
OSV
CVE-2021-4183: Crash in the pcapng file parser in Wireshark 3
osv·2021-12-30·CVSS 5.5
CVE-2021-4183 [MEDIUM] CVE-2021-4183: Crash in the pcapng file parser in Wireshark 3
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4183.jsonhttps://gitlab.com/wireshark/wireshark/-/issues/17755https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6XGBKWSQFCVYUN4ZK3O3NJIFP3OAFVT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ/https://security.gentoo.org/glsa/202210-04https://www.oracle.com/security-alerts/cpuapr2022.htmlhttps://www.wireshark.org/security/wnpa-sec-2021-19.htmlhttps://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4183.jsonhttps://gitlab.com/wireshark/wireshark/-/issues/17755https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6XGBKWSQFCVYUN4ZK3O3NJIFP3OAFVT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ/https://security.gentoo.org/glsa/202210-04https://www.oracle.com/security-alerts/cpuapr2022.htmlhttps://www.wireshark.org/security/wnpa-sec-2021-19.html
2021-12-30
Published