GitLabCVELIST:CVE-2021-22173CVE-2021-22173
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
7.7 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.5%
Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
CNA Affected
[
{
"product": "Wireshark",
"vendor": "The Wireshark Foundation",
"versions": [
{
"status": "affected",
"version": ">=3.4.0, <3.4.3"
}
]
}
]References
gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22173.json
gitlab.com/wireshark/wireshark/-/issues/17124
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GND3PIQC3KZALR227V4YUMPKJBA5BZG4/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYXLKQJ3D632XSG6VO7M4YFDAG6GRCLY/
security.gentoo.org/glsa/202107-21
www.oracle.com/security-alerts/cpuApr2021.html
www.wireshark.org/security/wnpa-sec-2021-01.html
Related
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
7.7 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.5%