CVE-2021-22235 log

Source
Severity Low
Remote Yes
Type Denial of service
Description
It may be possible to make Wireshark before version 3.4.7 crash by injecting a malformed DNP3 packet onto the wire or by convincing someone to read a malformed packet trace file.
Group Package Affected Fixed Severity Status Ticket
AVG-2160 wireshark-cli 3.4.6-1 3.4.7-1 Low Fixed
Date Advisory Group Package Severity Type
20 Jul 2021 ASA-202107-44 AVG-2160 wireshark-cli Low denial of service
References
https://www.wireshark.org/security/wnpa-sec-2021-06
https://gitlab.com/wireshark/wireshark/-/issues/17462
https://gitlab.com/wireshark/wireshark/-/merge_requests/3477
https://gitlab.com/wireshark/wireshark/-/commit/490fe2684bf63cf4fe03e6495c9ef74c8bc86a2b