Name: CVE-2021-22207: Allocation of Resources Without Limits or Throttling
Creator: Rapid7
Published: 2021-04-23T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-22207, CWE-770, CVSS 5.5, EPSS 0.02023

Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file

CVSS Details

CVSS 3.1 Base Score: 5.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade wireshark	Aug 22, 2024	Apr 23, 2021
Debian	—	Upgrade wireshark	Dec 28, 2021	Apr 23, 2021
Gentoo Linux	—	Upgrade net-analyzer/wireshark.	Jul 12, 2021	Apr 23, 2021
Oracle Solaris	—	Upgrade diagnostic/wireshark/tshark to version 3.4.5-11.4.34.0.1.94.3 on Solaris 11.4Upgrade diagnostic/wireshark/wireshark-common to version 3.4.5-11.4.34.0.1.94.3 on Solaris 11.4Upgrade diagnostic/wireshark to version 3.4.5-11.4.34.0.1.94.3 on Solaris 11.4	Jun 16, 2021	Apr 23, 2021
Redhat_linux	—	No solution exists	Jul 9, 2025	Apr 23, 2021
Suse	—	Upgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-libsUpgrade libvirt-daemon-qemuUpgrade libvirt-develUpgrade libwireshark14Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade sbc-develUpgrade libwsutil12Upgrade libvirt-docUpgrade libsbc1-32bitUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-networkUpgrade libvirt-adminUpgrade libqt5multimedia5Upgrade libvirt-daemon-config-networkUpgrade wireshark-ui-qtUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilterUpgrade libwiretap11Upgrade sbcUpgrade libvirt-daemon-driver-storageUpgrade libwsutil13Upgrade libqt5-qtmultimedia-develUpgrade libvirt-nssUpgrade libvirt-lock-sanlockUpgrade libwiretap12Upgrade libvirt-daemon-lxcUpgrade libvirt-daemon-xenUpgrade libqt5-qtmultimedia-private-headers-develUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-secretUpgrade libsbc1Upgrade libwireshark15Upgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsiUpgrade wiresharkUpgrade wireshark-devel	Jun 23, 2021	Apr 23, 2021
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Apr 23, 2021
Wireshark	—	Upgrade to Wireshark version 3.2.13Upgrade to Wireshark version 3.4.5	Apr 23, 2021	Apr 23, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence