CVE-2021-4185

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols.

Security Fix(es):

Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file(CVE-2021-22207)

Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.(CVE-2021-22191)

Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file(CVE-2021-4181)

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file(CVE-2021-4185)

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

• CVE-2021-4185: fix infinite loop in RTMPT dissector on TCP sequence wraparound

Several wireshark vulnerabilities have been fixed. See the release notes for details.

This update for wireshark fixes the following issues:

Update to version 3.6.1:

• CVE-2021-4185: RTMPT dissector infinite loop (bsc#1194166)
• CVE-2021-4184: BitTorrent DHT dissector infinite loop (bsc#1194167)
• CVE-2021-4183: pcapng file parser crash (bsc#1194168)
• CVE-2021-4182: RFC 7468 file parser infinite loop (bsc#1194169)
• CVE-2021-4181: Sysdig Event dissector crash (bsc#1194170)
• CVE-2021-4190: Kafka dissector infinite loop (bsc#1194171)
• Support for Shared Memory Communications (SMC) (jsc#SLE-18727)

These are all security issues fixed in the libwireshark15-3.6.1-1.1 package on the GA media of openSUSE Tumbleweed.

This update for wireshark fixes the following issues:

Update to version 3.6.1:

• CVE-2021-4185: RTMPT dissector infinite loop (bsc#1194166)
• CVE-2021-4184: BitTorrent DHT dissector infinite loop (bsc#1194167)
• CVE-2021-4183: pcapng file parser crash (bsc#1194168)
• CVE-2021-4182: RFC 7468 file parser infinite loop (bsc#1194169)
• CVE-2021-4181: Sysdig Event dissector crash (bsc#1194170)
• CVE-2021-4190: Kafka dissector infinite loop (bsc#1194171)
• Support for Shared Memory Communications (SMC) (jsc#SLE-18727)

It was discovered that Wireshark did not correctly handle recursion. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-39929)

Roman Donchenko discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-4182)

It was discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-4185, CVE-2022-0581)

It was discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-4186)

Sharon Brizinov discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-0582, CVE-2022-0583, CVE-2022-0586)

Sharon Brizinov discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2022-0585)

Jason Cohen discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-3190)