CVE-2021-22191

8.8 highEPSS 3.7%

High (8.8). EPSS 3.7% chance of exploitation in the next 30 days.

Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 3.7% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2021-03-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

debian:debian_linux
oracle:zfs_storage_appliance
wireshark:wireshark

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22191.json
https://gitlab.com/wireshark/wireshark/-/issues/17232
https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html
https://security.gentoo.org/glsa/202107-21
https://www.oracle.com/security-alerts/cpuApr2021.html

Check your stack JSON