Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file
References
| Link | Resource |
|---|---|
| https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22222.json | Third Party Advisory |
| https://gitlab.com/wireshark/wireshark/-/merge_requests/3130 | Patch Third Party Advisory |
| https://security.gentoo.org/glsa/202107-21 | Third Party Advisory |
| https://www.debian.org/security/2021/dsa-5019 | Third Party Advisory |
| https://www.oracle.com/security-alerts/cpuoct2021.html | Patch Third Party Advisory |
| https://www.wireshark.org/security/wnpa-sec-2021-05.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
01 Apr 2022, 19:10
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.oracle.com/security-alerts/cpuoct2021.html - Patch, Third Party Advisory | |
| References | (DEBIAN) https://www.debian.org/security/2021/dsa-5019 - Third Party Advisory |
11 Dec 2021, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Dec 2021, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:* |
|
| References | (GENTOO) https://security.gentoo.org/glsa/202107-21 - Third Party Advisory | |
| References | (MISC) https://www.oracle.com/security-alerts/cpuoct2021.html - Third Party Advisory |
20 Oct 2021, 11:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
10 Jun 2021, 20:04
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-835 | |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
| References | (MISC) https://gitlab.com/wireshark/wireshark/-/merge_requests/3130 - Patch, Third Party Advisory | |
| References | (MISC) https://www.wireshark.org/security/wnpa-sec-2021-05.html - Vendor Advisory | |
| References | (CONFIRM) https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22222.json - Third Party Advisory | |
| CPE | cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:* |
07 Jun 2021, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-06-07 13:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-22222
Mitre link : CVE-2021-22222
CVE.ORG link : CVE-2021-22222
JSON object : View
Products Affected
wireshark
- wireshark
debian
- debian_linux
oracle
- zfs_storage_appliance_kit
- instantis_enterprisetrack
- enterprise_manager_ops_center
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')