TROYANOSYVIRUS
Volver a CVEs

CVE-2021-4182

HIGH
7.5

Descripcion

Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

Detalles CVE

Puntuacion CVSS v3.17.5
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioNONE
Publicado12/30/2021
Ultima modificacion11/3/2025
Fuentenvd
Avistamientos honeypot0

Productos afectados

fedoraproject:fedoraoracle:http_serveroracle:zfs_storage_appliance_kitwireshark:wireshark

Debilidades (CWE)

CWE-835

Referencias

https://gitlab.com/wireshark/wireshark/-/issues/17801(af854a3a-2127-422b-91ae-364da2661108)
https://security.gentoo.org/glsa/202210-04(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuapr2022.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.wireshark.org/security/wnpa-sec-2021-20.html(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.