CVE-2021-22191 | HackTesting

Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.

Credits

Lukas Euler

References

https://www.wireshark.org/security/wnpa-sec-2021-03.html

https://gitlab.com/wireshark/wireshark/-/issues/17232

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22191.json

https://www.oracle.com/security-alerts/cpuApr2021.html

https://security.gentoo.org/glsa/202107-21

https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html