CVE-2021-39922: Buffer Overflow
Published Nov 19, 2021
·Updated
Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected Software
8 affected componentsFixes available
debian/wireshark
2.6.20-0+deb10u42.6.20-0+deb10u73.4.10-0+deb11u14.0.6-1~deb12u14.0.10-1
Wireshark Wireshark>=3.2.0<=3.2.17
Wireshark Wireshark>=3.4.0<=3.4.9
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Remediation
Patch Available
Event History
Nov 19, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-39922?
CVE-2021-39922 is a buffer overflow vulnerability in the C12.22 dissector in Wireshark versions 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17.
2
How does CVE-2021-39922 impact Wireshark?
CVE-2021-39922 allows denial of service via packet injection or crafted capture file.
3
Which software versions are affected by CVE-2021-39922?
Wireshark versions 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 are affected by CVE-2021-39922.
4
What is the severity of CVE-2021-39922?
CVE-2021-39922 has a severity rating of 7.5 (high).
5
How can I mitigate CVE-2021-39922?
Update Wireshark to versions 3.4.10 or 3.2.18, or apply the recommended patches for the affected software versions.