GitLabCVELIST:CVE-2021-4186

HistoryDec 30, 2021 - 12:00 a.m.

CVE-2021-4186

2021-12-3000:00:00

GitLab

www.cve.org

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

AI Score

7.8

Confidence

High

EPSS

0.003

Percentile

69.5%

JSON

Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

CNA Affected

[
  {
    "vendor": "Wireshark Foundation",
    "product": "Wireshark",
    "versions": [
      {
        "version": ">=3.4.0, <3.4.10",
        "status": "affected"
      }
    ]
  }
]

References

gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4186.json

gitlab.com/wireshark/wireshark/-/issues/17737

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6XGBKWSQFCVYUN4ZK3O3NJIFP3OAFVT/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ/

security.gentoo.org/glsa/202210-04

www.wireshark.org/security/wnpa-sec-2021-16.html