Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file

CVE-2021-22174 · published 5 years ago
Summary

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file

What to do
  • Update debian wireshark to version 3.4.3-1.
  • Update wireshark wireshark to version 3.4.3 or later.
Affected software
Ecosystem VendorProductAffected versions
– wireshark wireshark >= 3.4.0, < 3.4.3
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
– fedoraproject fedora 32
33
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
– oracle zfs_storage_appliance 8.8
cpe:2.3:o:oracle:zfs_storage_appliance:8.8:*:*:*:*:*:*:*
Ubuntu:Pro:14.04:LTS canonical wireshark All versions
Debian:12 debian wireshark < 3.4.3-1
Fix: upgrade to 3.4.3-1
Original advisory text
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
3% chance of attack within 30 days
Type
CWE-770Allocation of Resources Without Limits
Timeline
Published17 Feb 2021
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2021-22174 · NVD
UBUNTU-CVE-2021-22174 · OSV
CVE-2021-22174 · OSV
DEBIAN-CVE-2021-22174 · OSV
Track software like this
Free during beta