CVE-2021-4185
Description
Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file
Risk Information
Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.129
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2021-4181,CVE-2021-4182,CVE-2021-4183,CVE-2021-4184,CVE-2021-4185 are fixed in Wireshark (3.6.1) | Windows |
| Vulnerabilities CVE-2021-4181,CVE-2021-4182,CVE-2021-4183,CVE-2021-4184,CVE-2021-4185 are fixed in Wireshark (X64) (3.6.1) | Windows |
| Vulnerabilities CVE-2021-4181,CVE-2021-4182,CVE-2021-4183,CVE-2021-4184,CVE-2021-4185 are fixed in Wireshark x64 3.6.1 | Windows |
| Vulnerabilities CVE-2021-4181,CVE-2021-4182,CVE-2021-4184,CVE-2021-4185,CVE-2021-4186 are fixed in Wireshark 3.4.11 | Windows |
| Vulnerabilities CVE-2021-4181,CVE-2021-4182,CVE-2021-4184,CVE-2021-4185,CVE-2021-4186 are fixed in Wireshark x64 3.4.11 | Windows |
| Multiple Vulnerabilities are affected in WireShark For Mac 3.4.10 | Mac |
| Multiple Vulnerabilities are affected in WireShark For Mac 3.6.0 | Mac |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-323050 | Wireshark (3.6.1) |
| PATCH-323051 | Wireshark (X64) (3.6.1) |
| PATCH-323051 | Wireshark (X64) (3.6.1) |
| PATCH-323050 | Wireshark (3.6.1) |
| PATCH-323051 | Wireshark (X64) (3.6.1) |
| PATCH-611905 | WireShark for Mac (Apple Silicon) (4.4.9) |
| PATCH-611905 | WireShark for Mac (Apple Silicon) (4.4.9) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234