CVE-2021-4190

Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file...

CVE-2021-4183

Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file...

PT-2021-23448 · Wireshark +2 · Wireshark +2

Name of the Vulnerable Software and Affected Versions: Wireshark version 3.6.0 Description: The issue is related to a large loop in the Kafka dissector, which allows for denial of service via packet injection or crafted capture file. Recommendations: For Wireshark version 3.6.0, consider disablin...

CVE-2021-4182

Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

CVE-2021-4184

Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

CVE-2021-4181

Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

CVE-2021-4183

Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file...

CVE-2021-4185

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

Wireshark 缓冲区错误漏洞

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark version 3.6.0 suffers from an injection vulnerability that stems from a crash...

CVE-2021-4184

Wireshark CVE-2021-4184 is an infinite-loop DoS in the BitTorrent DHT dissector. Affected: Wireshark 3.6.0 and 3.4.0–3.4.10. Root cause: BitTorrent DHT parser infinite loop leading to application halt/crash via crafted capture files or packet injections. Publicly stated fixes exist in later Wires...

CVE-2021-4186

Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

CVE-2021-4184

Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

CVE-2021-4181

Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

CVE-2021-4190

Wireshark CVE-2021-4190 is a vulnerability in the Kafka dissector where a large loop can cause denial-of-service via crafted captures or packet-injected data. The initial entry states Wireshark 3.6.0 as affected; connected advisories show the issue widely tracked and fixed in later Wireshark rele...

CVE-2021-4181

Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

Wireshark 代码问题漏洞

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. An injection vulnerability exists in Wireshark versions 3.4.0 - 3.4.10, which stems fro...

CVE-2021-4183

Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file...

CVE-2021-4186

CVE-2021-4186 affects Wireshark Gryphon dissector crashes in 3.4.0–3.4.10, enabling DoS via crafted captures or packet injection. Fixes exist in newer Wireshark releases (e.g., Debian LTS advisory cites 3.4.16-0+deb11u1; Mariner notes a fix at 3.4.14-1). Organizations should upgrade to a supporte...

CVE-2021-4185

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

Wireshark 注入漏洞

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. Gryphon dissector is one of the Gryphon protocol parsers. An attacker could exploit this vulnerability to cause a denial of service via packet injection or specially crafted capture files...