Denial of Service Vulnerability in Wireshark's BitTorrent DHT Dissector
CVE-2021-4184
7.5HIGH
Summary
A denial of service vulnerability exists in the BitTorrent DHT dissector of Wireshark. The flaw may be exploited by attackers through packet injection or crafted capture files, leading to an infinite loop that disrupts normal operations. This can result in the software becoming unresponsive, thereby hindering network analysis capabilities.
Affected Version(s)
Wireshark =3.6.0 = 3.6.0
Wireshark >=3.4.0, <3.4.10 < 3.4.0, 3.4.10
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved