Vulnerability Description
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
CVSS Score
6.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wireshark | Wireshark | >= 3.2.0, <= 3.2.11 |
| Oracle | Zfs Storage Appliance | 8.8 |
| Debian | Debian Linux | 9.0 |
Related Weaknesses (CWE)
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22191.jsonThird Party Advisory
- https://gitlab.com/wireshark/wireshark/-/issues/17232Issue TrackingThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/03/msg00041.htmlThird Party Advisory
- https://security.gentoo.org/glsa/202107-21Third Party Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.htmlPatchThird Party Advisory
- https://www.wireshark.org/security/wnpa-sec-2021-03.htmlVendor Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22191.jsonThird Party Advisory
- https://gitlab.com/wireshark/wireshark/-/issues/17232Issue TrackingThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/03/msg00041.htmlThird Party Advisory
- https://security.gentoo.org/glsa/202107-21Third Party Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.htmlPatchThird Party Advisory
- https://www.wireshark.org/security/wnpa-sec-2021-03.htmlVendor Advisory
FAQ
What is CVE-2021-22191?
CVE-2021-22191 is a vulnerability with a CVSS score of 6.3 (MEDIUM). Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
How severe is CVE-2021-22191?
CVE-2021-22191 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-22191?
Check the references section above for vendor advisories and patch information. Affected products include: Wireshark Wireshark, Oracle Zfs Storage Appliance, Debian Debian Linux.