low3.7
CVE-2021-22174
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
Impact
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wireshark | Wireshark | from 3.4.0 before 3.4.3 |
| Fedoraproject | Fedora | Versions 32, 33 |
| Oracle | Zfs Storage Appliance | Version 8.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22174.json
- https://gitlab.com/wireshark/wireshark/-/issues/17165
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GND3PIQC3KZALR227V4YUMPKJBA5BZG4/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYXLKQJ3D632XSG6VO7M4YFDAG6GRCLY/
- https://security.gentoo.org/glsa/202107-21
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.wireshark.org/security/wnpa-sec-2021-02.html
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22174.json
- https://gitlab.com/wireshark/wireshark/-/issues/17165
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GND3PIQC3KZALR227V4YUMPKJBA5BZG4/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYXLKQJ3D632XSG6VO7M4YFDAG6GRCLY/
- https://security.gentoo.org/glsa/202107-21
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.wireshark.org/security/wnpa-sec-2021-02.html