Medium severity5.5NVD Advisory· Published Apr 23, 2021· Updated Jun 17, 2026

CVE-2021-22207

Description

Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

The Wireshark Foundation/Wiresharkv5
Range: >=3.4.0, <3.4.5
osv-coords51 versions
pkg:rpm/opensuse/wireshark&distro=openSUSE%20Tumbleweed pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP2 pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/libqt5-qtmultimedia&distro=SUSE%20Manager%20Server%204.0 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/libqt5-qtmultimedia&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/libqt5-qtmultimedia&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/wireshark&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3 pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/libqt5-qtmultimedia&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/libqt5-qtmultimedia&distro=SUSE%20Manager%20Proxy%204.0 pkg:rpm/suse/libqt5-qtmultimedia&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.0 pkg:rpm/suse/sbc&distro=SUSE%20Manager%20Server%204.0 pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3 pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/sbc&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.0 pkg:rpm/suse/sbc&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP2 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/wireshark&distro=SUSE%20Manager%20Proxy%204.0 pkg:rpm/suse/wireshark&distro=SUSE%20Manager%20Server%204.0 pkg:rpm/suse/libqt5-qtmultimedia&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/libqt5-qtmultimedia&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/libqt5-qtmultimedia&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/wireshark&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.0 pkg:rpm/opensuse/sbc&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/sbc&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/sbc&distro=SUSE%20Manager%20Proxy%204.0 pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2015.2
< 3.4.8-1.2+ 50 more
- (no CPE)range: < 3.4.8-1.2
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 5.9.7-7.2.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 4.0.0-9.37.21
- (no CPE)range: < 5.9.7-7.2.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 4.0.0-9.37.21
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 5.9.7-7.2.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 5.9.7-7.2.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 5.9.7-7.2.1
- (no CPE)range: < 5.9.7-7.2.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 4.0.0-9.37.21
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 5.9.7-7.2.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 4.0.0-9.37.21
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 5.9.7-7.2.1
- (no CPE)range: < 5.9.7-7.2.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 3.4.5-3.53.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 1.3-3.2.1
- (no CPE)range: < 3.4.5-lp152.2.12.1
Wireshark/Wiresharkllm-fuzzy2 versions
3.4.0 to 3.4.4, 3.2.0 to 3.2.12+ 1 more
- (no CPE)range: 3.4.0 to 3.4.4, 3.2.0 to 3.2.12
- cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*range: >=3.2.0,<=3.2.12
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Oracle Corporation/Zfs Storage Appliance Kit
cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.oracle.com/security-alerts/cpuoct2021.htmlnvdPatchThird Party Advisory
gitlab.com/wireshark/wireshark/-/issues/17331nvdExploitThird Party Advisory
gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22207.jsonnvdThird Party Advisory
lists.debian.org/debian-lts-announce/2021/12/msg00015.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202107-21nvdThird Party Advisory
www.debian.org/security/2021/dsa-5019nvdThird Party Advisory
www.wireshark.org/security/wnpa-sec-2021-04.htmlnvdVendor Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIWWO27HV4HUKXV6NH6ULHCRAQB26DMD/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NL7ZTMMWIEPHHFK3ONRKATWE7CLIGLFD/nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000