CVE-2021-4186 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 31%

Affected Products (NVD)

Vendor	Product	Version
wireshark	wireshark	3.4.0 ≤ 𝑥 ≤ 3.4.10

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

wireshark

bookworm	4.0.11-1~deb12u1 fixed
bookworm (security)	4.0.11-1~deb12u1 fixed
bullseye	vulnerable
bullseye (security)	3.4.16-0+deb11u1 fixed
buster	not-affected
sid	4.4.1-1 fixed
stretch	not-affected
trixie	4.4.0-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

wireshark

bionic	not-affected
focal	not-affected
hirsute	ignored
impish	ignored
jammy	needs-triage
kinetic	ignored
lunar	ignored
mantic	ignored
noble	needs-triage
trusty	needs-triage
xenial	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

libwireshark15

suse enterprise desktop 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise sap 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise server 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP6	3.6.20-150600.16.5 fixed

libwireshark17

suse enterprise desktop 15 SP7	4.2.11-150600.18.20.1 fixed
suse enterprise sap 15 SP7	4.2.11-150600.18.20.1 fixed
suse enterprise server 15 SP7	4.2.11-150600.18.20.1 fixed

libwiretap12

suse enterprise desktop 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise sap 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise server 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP6	3.6.20-150600.16.5 fixed

libwiretap14

suse enterprise desktop 15 SP7	4.2.11-150600.18.20.1 fixed
suse enterprise sap 15 SP7	4.2.11-150600.18.20.1 fixed
suse enterprise server 15 SP7	4.2.11-150600.18.20.1 fixed

libwsutil13

suse enterprise desktop 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise sap 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise server 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP6	3.6.20-150600.16.5 fixed

libwsutil15

suse enterprise desktop 15 SP7	4.2.11-150600.18.20.1 fixed
suse enterprise sap 15 SP7	4.2.11-150600.18.20.1 fixed
suse enterprise server 15 SP7	4.2.11-150600.18.20.1 fixed

wireshark

suse enterprise desktop 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise desktop 15 SP7	4.2.11-150600.18.20.1 fixed
suse enterprise sap 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise sap 15 SP7	4.2.11-150600.18.20.1 fixed
suse enterprise server 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise server 15 SP7	4.2.11-150600.18.20.1 fixed

wireshark-devel

suse enterprise desktop 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise desktop 15 SP7	4.2.11-150600.18.20.1 fixed
suse enterprise sap 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise sap 15 SP7	4.2.11-150600.18.20.1 fixed
suse enterprise server 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise server 15 SP7	4.2.11-150600.18.20.1 fixed

wireshark-ui-qt

suse enterprise desktop 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise desktop 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise desktop 15 SP7	4.2.11-150600.18.20.1 fixed
suse enterprise sap 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise sap 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise sap 15 SP7	4.2.11-150600.18.20.1 fixed
suse enterprise server 15 SP3	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP4	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP5	3.6.8-150000.3.74.1 fixed
suse enterprise server 15 SP6	3.6.20-150600.16.5 fixed
suse enterprise server 15 SP7	4.2.11-150600.18.20.1 fixed

Known Exploits!

Common Weakness Enumeration

CWE-476 - NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4186.json

https://gitlab.com/wireshark/wireshark/-/issues/17737

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6XGBKWSQFCVYUN4ZK3O3NJIFP3OAFVT/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ/

https://security.gentoo.org/glsa/202210-04

https://www.wireshark.org/security/wnpa-sec-2021-16.html

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4186.json

https://gitlab.com/wireshark/wireshark/-/issues/17737

https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6XGBKWSQFCVYUN4ZK3O3NJIFP3OAFVT/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ/

https://security.gentoo.org/glsa/202210-04

https://www.wireshark.org/security/wnpa-sec-2021-16.html