CVE-2021-22191 PUBLISHED

Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.

EPSS 0.27% · 50.5th percentile

Risk Scores

EPSS Score
0.27%
50.5th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSwireshark2.6.3-1~ubuntu18.04.1, 2.6.4-2~ubuntu18.04.0, 2.6.10-1~ubuntu18.04.0+esm2
Ubuntu:Pro:20.04:LTSwireshark3.0.7-1, 0, 3.2.3-1ubuntu0.1~esm2
Ubuntu:Pro:14.04:LTSwireshark2.6.10-1~ubuntu14.04.0~esm1, 1.10.2-1, 1.10.3-1
Ubuntu:Pro:16.04:LTSwireshark2.6.10-1~ubuntu16.04.0+esm2, 2.6.10-1~ubuntu16.04.0+esm1, 2.6.10-1~ubuntu16.04.0

Timeline

References

Open in Interactive Console →