wnpa-sec-2021-20 · RFC 7468 file parser infinite loop

Summary

Name: RFC 7468 file parser infinite loop

Docid: wnpa-sec-2021-20

Date: December 29, 2021

Affected versions: 3.6.0, 3.4.0 to 3.4.10

Fixed versions: 3.6.1, 3.4.11

References:
Wireshark issue 17801
CVE-2021-4182

Details

Description

The RFC 7468 file parser could go into an infinite loop. Discovered by Роман Донченко.

Impact

It may be possible to make Wireshark consume excessive CPU resources by convincing someone to read a malformed packet trace file.

Resolution

Upgrade to Wireshark 3.6.1, 3.4.11 or later.