CVE-2021-22235: 
Wireshark vulnerability analysis and mitigation

A vulnerability identified as CVE-2021-22235 was discovered in Wireshark versions 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14. The vulnerability specifically affects the DNP dissector component of Wireshark, allowing potential denial of service attacks through packet injection or crafted capture files (MITRE CVE, Debian Security).

The vulnerability manifests as a crash in the DNP (Distributed Network Protocol) dissector component of Wireshark. The issue involves attempting to free memory at an address which was not properly allocated through malloc(), as evidenced by the AddressSanitizer error reports (Wireshark Issue). The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (High), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (Ubuntu Security).

The primary impact of this vulnerability is the potential for denial of service attacks. When exploited, the vulnerability can cause Wireshark to crash through the processing of specially crafted packets or capture files (MITRE CVE).

The vulnerability can be exploited either through packet injection on a network or by convincing a user to open a maliciously crafted capture file. The attack vector is considered network-based with low attack complexity and requires no privileges or user interaction (Ubuntu Security).

The vulnerability has been fixed in Wireshark versions 3.4.7 and later. Various Linux distributions have released security updates to address this vulnerability: Debian released version 2.6.20-0+deb9u2 for Stretch and 3.4.10-0+deb11u1 for Bullseye, while Gentoo recommended upgrading to version 3.6.8 or later (Debian LTS, Gentoo Security).