7.5
CVE-2021-22222
- EPSS 1.79%
- Veröffentlicht 07.06.2021 13:15:07
- Zuletzt bearbeitet 21.11.2024 05:49:44
- Quelle cve@gitlab.com
- CVE-Watchlists
- Unerledigt
LoginInfinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Enterprise Manager Ops Center Version12.4.0.0
Oracle ≫ Instantis Enterprisetrack Version17.1
Oracle ≫ Instantis Enterprisetrack Version17.2
Oracle ≫ Instantis Enterprisetrack Version17.3
Oracle ≫ Zfs Storage Appliance Kit Version8.8
Debian ≫ Debian Linux Version10.0
Debian ≫ Debian Linux Version11.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.79% | 0.755 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| cve@gitlab.com | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
https://www.oracle.com/security-alerts/cpuoct2021.html
https://security.gentoo.org/glsa/202107-21
https://www.debian.org/security/2021/dsa-5019
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22222.json
https://gitlab.com/wireshark/wireshark/-/merge_requests/3130
https://www.wireshark.org/security/wnpa-sec-2021-05.html