CVE-2021-39922 - log back

CVE-2021-39922 edited at 17 Nov 2021 20:54:19
Severity
- Unknown
+ Low
Remote
- Unknown
+ Remote
Type
- Unknown
+ Denial of service
Description
+ It may be possible to make Wireshark before version 3.4.10 crash by injecting a malformed C12.22 packet onto the wire or by convincing someone to read a malformed packet trace file.
References
+ https://www.wireshark.org/security/wnpa-sec-2021-12
+ https://gitlab.com/wireshark/wireshark/-/issues/17636
+ https://gitlab.com/wireshark/wireshark/-/merge_requests/4851
+ https://gitlab.com/wireshark/wireshark/-/commit/7ac1d5bea12613b9b2a49ecc1c9a87fa886db697
CVE-2021-39922 created at 17 Nov 2021 20:44:47