CVE-2021-22191
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code...
6.3 MediumFix available
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
3.65%Up 1.8 points since Apr 14, 2021
What each source reports
CVE List Score used
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
- Record
CVE-2021-22191- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
EUVDEUVD-2021-9337
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
- Record
EUVD-2021-9337- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w6w5-wrcg-5jrx
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code...
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
- Record
GHSA-w6w5-wrcg-5jrx- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-74
- Updated
- 2026-11-02
NVD
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
- Record
CVE-2021-22191- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-74
- Updated
- 2026-11-02
OSVALPINE-CVE-2021-22191
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
- Record
ALPINE-CVE-2021-22191- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
- Record
CVE-2021-22191- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2021-22191
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
- Record
DEBIAN-CVE-2021-22191- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2022-1610
wireshark security update
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols.
Security Fix(es):
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file(CVE-2021-22207)
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.(CVE-2021-22191)
Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file(CVE-2021-4181)
Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file(CVE-2021-4185)
- Record
OESA-2022-1610- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-22191
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
- Record
UBUNTU-CVE-2021-22191- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2021-0185 No score
Updated wireshark packages fix a security vulnerability
Wireshark could open unsafe URLs (CVE-2021-22191).
- Record
MGASA-2021-0185- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0909-1 No score
Security update for wireshark, libvirt, sbc, libqt5-qtmultimedia
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
openSUSE-SU-2021:0909-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:2125-1 No score
Security update for wireshark
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
openSUSE-SU-2021:2125-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11513-1 No score
libwireshark14-3.4.8-1.2 on GA media
These are all security issues fixed in the libwireshark14-3.4.8-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11513-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:2125-1 No score
Security update for wireshark
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:
Update wireshark to version 3.4.5
- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements
Including security fixes for:
- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932)
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)
libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
- Record
SUSE-SU-2021:2125-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.13 |
3.2.0 up to 3.4.4-r0 | 3.4.4-r0 |
wiresharkAlpine:v3.14 |
3.2.0 up to 3.4.4-r0 | 3.4.4-r0 |
wiresharkAlpine:v3.15 |
3.2.0 up to 3.4.4-r0 | 3.4.4-r0 |
wiresharkAlpine:v3.16 |
3.2.0 up to 3.4.4-r0 | 3.4.4-r0 |
wiresharkAlpine:v3.17 |
3.2.0 up to 3.4.4-r0 | 3.4.4-r0 |
wiresharkAlpine:v3.18 |
3.2.0 up to 3.4.4-r0 | 3.4.4-r0 |
wiresharkAlpine:v3.19 |
3.2.0 up to 3.4.4-r0 | 3.4.4-r0 |
wiresharkAlpine:v3.20 |
3.2.0 up to 3.4.4-r0 | 3.4.4-r0 |
wiresharkAlpine:v3.21 |
3.2.0 up to 3.4.4-r0 | 3.4.4-r0 |
wiresharkAlpine:v3.22 |
3.2.0 up to 3.4.4-r0 | 3.4.4-r0 |
Show 65 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.23 |
3.2.0 up to 3.4.4-r0 | 3.4.4-r0 |
wiresharkAlpine:v3.24 |
3.2.0 up to 3.4.4-r0 | 3.4.4-r0 |
wiresharkDebian:12 |
before 3.4.4-1 | 3.4.4-1 |
wiresharkDebian:13 |
before 3.4.4-1 | 3.4.4-1 |
wiresharkDebian:14 |
before 3.4.4-1 | 3.4.4-1 |
wiresharkDebian:9 From an advisory covering 9 CVEs |
before 2.6.20-0+deb9u3, plus listed versions 2.2.6+g32dac6a-22.2.6+g32dac6a-2+deb9u12.2.6+g32dac6a-2+deb9u22.2.6+g32dac6a-2+deb9u32.2.7-1 Show 26 moreShow less2.4.0-12.4.1-12.4.2-12.4.3-12.4.4-12.4.5-12.4.6-12.6.1-12.6.10-12.6.2-12.6.2-22.6.20-0+deb9u12.6.20-0+deb9u22.6.3-12.6.3-1~deb9u12.6.4-12.6.4-22.6.5-12.6.5-1~deb9u12.6.6-12.6.7-12.6.7-1~deb9u12.6.8-12.6.8-1.12.6.8-1.1~deb9u12.6.9-1 |
2.6.20-0+deb9u3 |
wiresharkMageia:8 |
before 3.4.4-1.mga8 | 3.4.4-1.mga8 |
wiresharkopenEuler:20.03-LTS-SP1 From an advisory covering 4 CVEs |
before 2.6.2-21.oe1 | 2.6.2-21.oe1 |
wiresharkopenEuler:20.03-LTS-SP2 From an advisory covering 4 CVEs |
before 2.6.2-21.oe1 | 2.6.2-21.oe1 |
wiresharkopenEuler:20.03-LTS-SP3 From an advisory covering 4 CVEs |
before 2.6.2-21.oe1 | 2.6.2-21.oe1 |
sbcSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
sbcSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libvirtSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 4.0.0-9.37.21 | 4.0.0-9.37.21 |
sbcSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Proxy 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Retail Branch Server 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Manager Server 4.0 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
libqt5-qtmultimediaSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 5.9.7-7.2.1 | 5.9.7-7.2.1 |
sbcSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkSUSE:Enterprise Storage 6 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
wiresharkUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 9 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm22.6.10-1~ubuntu14.04.0~esm3 |
None known |
wiresharkUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 8 moreShow less2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm12.6.10-1~ubuntu16.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 7 moreShow less2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm12.6.10-1~ubuntu18.04.0+esm2 |
None known |
wiresharkUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm13.2.3-1ubuntu0.1~esm2 |
None known |
wiresharkopenSUSE:Leap 15.2 From an advisory covering 9 CVEs |
before 3.4.5-lp152.2.12.1 | 3.4.5-lp152.2.12.1 |
sbcopenSUSE:Leap 15.3 From an advisory covering 9 CVEs |
before 1.3-3.2.1 | 1.3-3.2.1 |
wiresharkopenSUSE:Leap 15.3 From an advisory covering 9 CVEs |
before 3.4.5-3.53.1 | 3.4.5-3.53.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 163 CVEs |
before 3.4.8-1.2 | 3.4.8-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-22191 is a medium vulnerability (CVSS 6.3) in The Wireshark Foundation Wireshark, published March 15, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.65%, the 89th percentile. Fixed in wireshark 3.4.4-r0.
References
wireshark.org/security/wnpa-sec-2021-03.html
gitlab.com/wireshark/wireshark/-/issues/17232
oracle.com/security-alerts/cpuApr2021.html
security.gentoo.org/glsa/202107-21
lists.debian.org/debian-lts-announce/2022/03/msg00041.html
Show 192 moreShow less
nvd.nist.gov/vuln/detail/CVE-2021-22191
github.com/advisories/GHSA-w6w5-wrcg-5jrx
security.alpinelinux.org/vuln/CVE-2021-22191
security-tracker.debian.org/tracker/CVE-2021-22191
advisories.mageia.org/MGASA-2021-0185.html
bugs.mageia.org/show_bug.cgi?id=28687
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1610
suse.com/support/update/announcement/2021/suse-su-20212125-1
bugzilla.suse.com/1179930
ubuntu.com/security/CVE-2021-22191
cve.org/CVERecord?id=CVE-2021-22191
lists.opensuse.org/archives/list/[email protected]/thread/QDSEUP77D5HE3ISH2VMQR2GIAFH6DLQK