This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2021-22191 →
DEBIAN-CVE-2021-22191
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture fi...
Original description
The description as published by the source.
Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
wireshark
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-1"}]}]
Debian:13
wireshark
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-1"}]}]
Debian:14
wireshark
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-1"}]}]
References
- advisory security-tracker.debian.org