Published: 23/04/2021 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file

Vulnerable Product	Search on Vulmon	Subscribe to Product
wireshark wireshark
fedoraproject fedora 33
fedoraproject fedora 34
oracle zfs storage appliance kit 8.8
debian debian linux 9.0
debian debian linux 10.0
debian debian linux 11.0

Debian Bug report logs - #987853 wireshark: CVE-2021-22207 Package: src:wireshark; Maintainer for src:wireshark is Balint Reczey <rbalint@ubuntucom>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 30 Apr 2021 20:57:01 UTC Severity: important Tags: security, upstream Found in version wireshark/34 ...

Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer which could result in denial of service or the execution of arbitrary code For the oldstable distribution (buster), CVE-2021-39925 has been fixed in in version 2620-0+deb10u2 For the stable distribution (bullseye), these problems have been fixed in version 3 ...

No description is available for this CVE ...

Excessive memory consumption in MS-WSP dissector in Wireshark 340 to 344 and 320 to 3212 allows denial of service via packet injection or a crafted capture file ...

CWE-770 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22207.json https://gitlab.com/wireshark/wireshark/-/issues/17331 https://www.wireshark.org/security/wnpa-sec-2021-04.html https://security.gentoo.org/glsa/202107-21 https://www.oracle.com/security-alerts/cpuoct2021.html https://www.debian.org/security/2021/dsa-5019 https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NL7ZTMMWIEPHHFK3ONRKATWE7CLIGLFD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIWWO27HV4HUKXV6NH6ULHCRAQB26DMD/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987853 https://nvd.nist.gov https://www.debian.org/security/2021/dsa-5019

CVE-2021-22207

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect