Related Vulnerabilities: CVE-2021-22235  

It may be possible to make Wireshark before version 3.4.7 crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

Severity Low

Remote Yes

Type Denial of service

Description

It may be possible to make Wireshark before version 3.4.7 crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file.

AVG-2160 wireshark-cli 3.4.6-1 3.4.7-1 Low Fixed

https://www.wireshark.org/security/wnpa-sec-2021-06
https://gitlab.com/wireshark/wireshark/-/issues/17462
https://gitlab.com/wireshark/wireshark/-/merge_requests/3477
https://gitlab.com/wireshark/wireshark/-/commit/490fe2684bf63cf4fe03e6495c9ef74c8bc86a2b