Denial of Service Vulnerability in Wireshark by The Wireshark Foundation

CVE-2021-4190

What is CVE-2021-4190?

A vulnerability exists in Wireshark 3.6.0 that allows for denial of service attacks. This is due to a large loop in the Kafka dissector, which can be exploited through packet injection or by using specially crafted capture files. Attackers can leverage this flaw to interrupt normal functionality, causing the application to become unresponsive.

References