CVE-2021-22174
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet...
3.7 LowFix available
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
2.75%Up 1.2 points since Apr 14, 2021
What each source reports
CVE List Score used
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
- Record
CVE-2021-22174- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
EUVDEUVD-2021-9320
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
- Record
EUVD-2021-9320- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m8vf-6qcv-248x
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet...
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
- Record
GHSA-m8vf-6qcv-248x- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
- Record
CVE-2021-22174- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-770
- Updated
- 2026-11-02
OSVALPINE-CVE-2021-22174
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
- Record
ALPINE-CVE-2021-22174- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSV
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
- Record
CVE-2021-22174- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2021-22174
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
- Record
DEBIAN-CVE-2021-22174- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-22174
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
- Record
UBUNTU-CVE-2021-22174- CVSS 3.1
- 3.7 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0909-1 No score
Security update for wireshark, libvirt, sbc, libqt5-qtmultimedia
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
openSUSE-SU-2021:0909-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:2125-1 No score
Security update for wireshark
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
openSUSE-SU-2021:2125-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11513-1 No score
libwireshark14-3.4.8-1.2 on GA media
These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11513-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:2125-1 No score
Security update for wireshark
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
SUSE-SU-2021:2125-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.13 |
3.4.0 up to 3.4.3-r0 | 3.4.3-r0 |
wiresharkAlpine:v3.14 |
3.4.0 up to 3.4.3-r0 | 3.4.3-r0 |
wiresharkAlpine:v3.15 |
3.4.0 up to 3.4.3-r0 | 3.4.3-r0 |
wiresharkAlpine:v3.16 |
3.4.0 up to 3.4.3-r0 | 3.4.3-r0 |
wiresharkAlpine:v3.17 |
3.4.0 up to 3.4.3-r0 | 3.4.3-r0 |
wiresharkAlpine:v3.18 |
3.4.0 up to 3.4.3-r0 | 3.4.3-r0 |
wiresharkAlpine:v3.19 |
3.4.0 up to 3.4.3-r0 | 3.4.3-r0 |
wiresharkAlpine:v3.20 |
3.4.0 up to 3.4.3-r0 | 3.4.3-r0 |
wiresharkAlpine:v3.21 |
3.4.0 up to 3.4.3-r0 | 3.4.3-r0 |
wiresharkAlpine:v3.22 |
3.4.0 up to 3.4.3-r0 | 3.4.3-r0 |
Show 65 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.23 |
3.4.0 up to 3.4.3-r0 | 3.4.3-r0 |
wiresharkAlpine:v3.24 |
3.4.0 up to 3.4.3-r0 | 3.4.3-r0 |
wiresharkDebian:12 |
before 3.4.3-1 | 3.4.3-1 |
wiresharkDebian:13 |
before 3.4.3-1 | 3.4.3-1 |
wiresharkDebian:14 |
before 3.4.3-1 | 3.4.3-1 |
sbcSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
wiresharkUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3 |
None known |
wiresharkUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 8 moreShow less2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 7 moreShow less2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2 |
None known |
wiresharkUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1 |
None known |
wiresharkUbuntu:24.04:LTS |
All versions, plus listed versions 4.0.8-14.0.10-14.0.11-14.2.0-14.2.2-14.2.2-1.1build14.2.2-1.1build24.2.2-1.1build3 |
None known |
wiresharkUbuntu:25.10 |
All versions, plus listed versions 4.4.5-14.4.6-24.4.6-2build14.4.7-1 |
None known |
wiresharkUbuntu:26.10 |
All versions, plus listed versions 4.6.4-14.6.6-14.6.6-24.6.6-2build1 |
None known |
wiresharkUbuntu:26.04:LTS |
All versions, plus listed versions 4.4.7-14.6.0-14.6.1-24.6.2-34.6.3-14.6.4-1 |
None known |
wiresharkopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 3.4.5-lp152.2.12.1 | 3.4.5-lp152.2.12.1 |
sbcopenSUSE:Leap 15.3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkopenSUSE:Leap 15.3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 163 CVEs |
before 3.4.8-1.2 | 3.4.8-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-22174 is a low vulnerability (CVSS 3.7) in The Wireshark Foundation Wireshark, published February 17, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. Fixed in wireshark 3.4.3-r0.
References
wireshark.org/security/wnpa-sec-2021-02.html
gitlab.com/wireshark/wireshark/-/issues/17165
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GND3PIQC3KZALR227V4YUMPKJBA5BZG4
oracle.com/security-alerts/cpuApr2021.html
Show 186 moreShow less
security.gentoo.org/glsa/202107-21
nvd.nist.gov/vuln/detail/CVE-2021-22174
github.com/advisories/GHSA-m8vf-6qcv-248x
security.alpinelinux.org/vuln/CVE-2021-22174
security-tracker.debian.org/tracker/CVE-2021-22174
suse.com/support/update/announcement/2021/suse-su-20212125-1
bugzilla.suse.com/1179930
ubuntu.com/security/CVE-2021-22174
cve.org/CVERecord?id=CVE-2021-22174
lists.opensuse.org/archives/list/[email protected]/thread/QDSEUP77D5HE3ISH2VMQR2GIAFH6DLQK