CVE-2021-4183
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
5.5 MediumFix available
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
1.53%Up 0.5 points since Dec 31, 2021
What each source reports
CVE List Score used
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
- Record
CVE-2021-4183- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
EUVDEUVD-2021-34043
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
- Record
EUVD-2021-34043- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-88qr-cjgj-jggp
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
- Record
GHSA-88qr-cjgj-jggp- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-74, CWE-125
- Updated
- 2026-11-02
NVD
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
- Record
CVE-2021-4183- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
OSV
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
- Record
CVE-2021-4183- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-4183
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
- Record
DEBIAN-CVE-2021-4183- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2021-4183
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
- Record
UBUNTU-CVE-2021-4183- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2022:0375-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
Update to version 3.6.1:
- CVE-2021-4185: RTMPT dissector infinite loop (bsc#1194166)
- CVE-2021-4184: BitTorrent DHT dissector infinite loop (bsc#1194167)
- CVE-2021-4183: pcapng file parser crash (bsc#1194168)
- CVE-2021-4182: RFC 7468 file parser infinite loop (bsc#1194169)
- CVE-2021-4181: Sysdig Event dissector crash (bsc#1194170)
- CVE-2021-4190: Kafka dissector infinite loop (bsc#1194171)
- Support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Record
openSUSE-SU-2022:0375-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11703-1 No score
libwireshark15-3.6.1-1.1 on GA media
These are all security issues fixed in the libwireshark15-3.6.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11703-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0375-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
Update to version 3.6.1:
- CVE-2021-4185: RTMPT dissector infinite loop (bsc#1194166)
- CVE-2021-4184: BitTorrent DHT dissector infinite loop (bsc#1194167)
- CVE-2021-4183: pcapng file parser crash (bsc#1194168)
- CVE-2021-4182: RFC 7468 file parser infinite loop (bsc#1194169)
- CVE-2021-4181: Sysdig Event dissector crash (bsc#1194170)
- CVE-2021-4190: Kafka dissector infinite loop (bsc#1194171)
- Support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Record
SUSE-SU-2022:0375-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkDebian:12 |
before 3.6.2-1 | 3.6.2-1 |
wiresharkDebian:13 |
before 3.6.2-1 | 3.6.2-1 |
wiresharkDebian:14 |
before 3.6.2-1 | 3.6.2-1 |
libvirtSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 6 CVEs |
before 7.1.0-150300.6.23.1 | 7.1.0-150300.6.23.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
libvirtSUSE:Linux Enterprise Module for Server Applications 15 SP3 From an advisory covering 6 CVEs |
before 7.1.0-150300.6.23.1 | 7.1.0-150300.6.23.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Manager Proxy 4.1 From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Manager Retail Branch Server 4.1 From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Manager Server 4.1 From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
libvirtSUSE:Linux Enterprise Micro 5.1 From an advisory covering 6 CVEs |
before 7.1.0-150300.6.23.1 | 7.1.0-150300.6.23.1 |
wiresharkSUSE:Enterprise Storage 6 From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkSUSE:Enterprise Storage 7 From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3 |
None known |
libvirtopenSUSE:Leap 15.3 From an advisory covering 6 CVEs |
before 7.1.0-150300.6.23.1 | 7.1.0-150300.6.23.1 |
wiresharkopenSUSE:Leap 15.3 From an advisory covering 6 CVEs |
before 3.6.1-3.68.1 | 3.6.1-3.68.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 3.6.1-1.1 | 3.6.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-4183 is a medium vulnerability (CVSS 5.5) in Wireshark, published December 30, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.53%, the 74th percentile. Fixed in wireshark 3.6.2-1.
References
wireshark.org/security/wnpa-sec-2021-19.html
gitlab.com/wireshark/wireshark/-/issues/17755
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ
oracle.com/security-alerts/cpuapr2022.html
Show 23 moreShow less
security.gentoo.org/glsa/202210-04
nvd.nist.gov/vuln/detail/CVE-2021-4183
github.com/advisories/GHSA-88qr-cjgj-jggp
security-tracker.debian.org/tracker/CVE-2021-4183
suse.com/support/update/announcement/2022/suse-su-20220375-1
bugzilla.suse.com/1194166
ubuntu.com/security/CVE-2021-4183
cve.org/CVERecord?id=CVE-2021-4183
lists.opensuse.org/archives/list/[email protected]/thread/JAOH336QWFQFZUXO5FOHF4P6VJNY7R4L