CVE-2021-22207
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12...
5.5 MediumFix available
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
2.02%Up 1.0 points since Apr 27, 2021
What each source reports
CVE List Score used
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
- Record
CVE-2021-22207- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
EUVDEUVD-2021-9353
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
- Record
EUVD-2021-9353- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r33p-r743-5j75
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12...
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
- Record
GHSA-r33p-r743-5j75- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-89, CWE-770
- Updated
- 2026-11-02
NVD
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
- Record
CVE-2021-22207- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-770
- Updated
- 2026-11-02
OSVALPINE-CVE-2021-22207
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
- Record
ALPINE-CVE-2021-22207- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVAZL-7405
CVE-2021-22207 affecting package wireshark for versions less than 3.4.14-1
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
- Record
AZL-7405- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 9 moreShow less
OSV
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
- Record
CVE-2021-22207- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-22207
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
- Record
DEBIAN-CVE-2021-22207- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2022-1610
wireshark security update
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols.
Security Fix(es):
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file(CVE-2021-22207)
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.(CVE-2021-22191)
Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file(CVE-2021-4181)
Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file(CVE-2021-4185)
- Record
OESA-2022-1610- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-22207
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file
- Record
UBUNTU-CVE-2021-22207- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2021-0222 No score
Updated wireshark packages fix a security vulnerability
The MS-WSP dissector could consume excessive amounts of memory (CVE-2021-22207).
- Record
MGASA-2021-0222- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0909-1 No score
Security update for wireshark, libvirt, sbc, libqt5-qtmultimedia
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
openSUSE-SU-2021:0909-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:2125-1 No score
Security update for wireshark
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
openSUSE-SU-2021:2125-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11513-1 No score
libwireshark14-3.4.8-1.2 on GA media
These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11513-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:2125-1 No score
Security update for wireshark
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
SUSE-SU-2021:2125-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.13 |
3.2.0 up to 3.4.5-r0 | 3.4.5-r0 |
wiresharkAlpine:v3.14 |
3.2.0 up to 3.4.5-r0 | 3.4.5-r0 |
wiresharkAlpine:v3.15 |
3.2.0 up to 3.4.5-r0 | 3.4.5-r0 |
wiresharkAlpine:v3.16 |
3.2.0 up to 3.4.5-r0 | 3.4.5-r0 |
wiresharkAlpine:v3.17 |
3.2.0 up to 3.4.5-r0 | 3.4.5-r0 |
wiresharkAlpine:v3.18 |
3.2.0 up to 3.4.5-r0 | 3.4.5-r0 |
wiresharkAlpine:v3.19 |
3.2.0 up to 3.4.5-r0 | 3.4.5-r0 |
wiresharkAlpine:v3.20 |
3.2.0 up to 3.4.5-r0 | 3.4.5-r0 |
wiresharkAlpine:v3.21 |
3.2.0 up to 3.4.5-r0 | 3.4.5-r0 |
wiresharkAlpine:v3.22 |
3.2.0 up to 3.4.5-r0 | 3.4.5-r0 |
Show 72 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.23 |
3.2.0 up to 3.4.5-r0 | 3.4.5-r0 |
wiresharkAlpine:v3.24 |
3.2.0 up to 3.4.5-r0 | 3.4.5-r0 |
wiresharkAzure Linux:2 |
before 3.4.14-1 | 3.4.14-1 |
wiresharkDebian:12 |
before 3.4.7-1 | 3.4.7-1 |
wiresharkDebian:13 |
before 3.4.7-1 | 3.4.7-1 |
wiresharkDebian:14 |
before 3.4.7-1 | 3.4.7-1 |
wiresharkDebian:9 From an advisory covering 9 CVEs |
before 2.6.20-0+deb9u2, plus listed versions 2.2.6+g32dac6a-22.2.6+g32dac6a-2+deb9u12.2.6+g32dac6a-2+deb9u22.2.6+g32dac6a-2+deb9u32.2.7-1 Show 25 moreShow less2.4.0-12.4.1-12.4.2-12.4.3-12.4.4-12.4.5-12.4.6-12.6.1-12.6.10-12.6.2-12.6.2-22.6.20-0+deb9u12.6.3-12.6.3-1~deb9u12.6.4-12.6.4-22.6.5-12.6.5-1~deb9u12.6.6-12.6.7-12.6.7-1~deb9u12.6.8-12.6.8-1.12.6.8-1.1~deb9u12.6.9-1 |
2.6.20-0+deb9u2 |
wiresharkDebian:11 From an advisory covering 12 CVEs |
before 3.4.10-0+deb11u1, plus listed versions 3.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1 |
3.4.10-0+deb11u1 |
wiresharkMageia:8 |
before 3.4.5-1.mga8 | 3.4.5-1.mga8 |
wiresharkopenEuler:20.03-LTS-SP1 From an advisory covering 4 CVEs |
before 2.6.2-21.oe1 | 2.6.2-21.oe1 |
wiresharkopenEuler:20.03-LTS-SP2 From an advisory covering 4 CVEs |
before 2.6.2-21.oe1 | 2.6.2-21.oe1 |
wiresharkopenEuler:20.03-LTS-SP3 From an advisory covering 4 CVEs |
before 2.6.2-21.oe1 | 2.6.2-21.oe1 |
sbcSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
wiresharkUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3 |
None known |
wiresharkUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 8 moreShow less2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 7 moreShow less2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2 |
None known |
wiresharkUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-23.6.2-2ubuntu0.1~esm1 |
None known |
wiresharkUbuntu:24.04:LTS |
All versions, plus listed versions 4.0.8-14.0.10-14.0.11-14.2.0-14.2.2-14.2.2-1.1build14.2.2-1.1build24.2.2-1.1build3 |
None known |
wiresharkUbuntu:25.10 |
All versions, plus listed versions 4.4.5-14.4.6-24.4.6-2build14.4.7-1 |
None known |
wiresharkUbuntu:26.10 |
All versions, plus listed versions 4.6.4-14.6.6-14.6.6-24.6.6-2build1 |
None known |
wiresharkUbuntu:26.04:LTS |
All versions, plus listed versions 4.4.7-14.6.0-14.6.1-24.6.2-34.6.3-14.6.4-1 |
None known |
wiresharkopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 3.4.5-lp152.2.12.1 | 3.4.5-lp152.2.12.1 |
sbcopenSUSE:Leap 15.3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkopenSUSE:Leap 15.3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 163 CVEs |
before 3.4.8-1.2 | 3.4.8-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-22207 is a medium vulnerability (CVSS 5.5) in The Wireshark Foundation Wireshark, published April 23, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.02%, the 81st percentile. Fixed in wireshark 3.4.5-r0.
References
wireshark.org/security/wnpa-sec-2021-04.html
gitlab.com/wireshark/wireshark/-/issues/17331
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NL7ZTMMWIEPHHFK3ONRKATWE7CLIGLFD
security.gentoo.org/glsa/202107-21
Show 194 moreShow less
oracle.com/security-alerts/cpuoct2021.html
debian.org/security/2021/dsa-5019
lists.debian.org/debian-lts-announce/2021/12/msg00015.html
nvd.nist.gov/vuln/detail/CVE-2021-22207
github.com/advisories/GHSA-r33p-r743-5j75
security.alpinelinux.org/vuln/CVE-2021-22207
security-tracker.debian.org/tracker/CVE-2021-22207
advisories.mageia.org/MGASA-2021-0222.html
bugs.mageia.org/show_bug.cgi?id=28915
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1610
suse.com/support/update/announcement/2021/suse-su-20212125-1
bugzilla.suse.com/1179930
ubuntu.com/security/CVE-2021-22207
cve.org/CVERecord?id=CVE-2021-22207
lists.opensuse.org/archives/list/[email protected]/thread/QDSEUP77D5HE3ISH2VMQR2GIAFH6DLQK
This page doesn't list everything
Left out here: 3 references. The JSON record has them.