CVE-2021-39924: High severity wireshark vulnerability
Published Nov 19, 2021
·Updated
Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected Software
6 affected componentsFixes available
debian/wireshark
2.6.20-0+deb10u42.6.20-0+deb10u73.4.10-0+deb11u14.0.6-1~deb12u14.0.10-1
Wireshark Wireshark>=3.2.0<=3.2.17
Wireshark Wireshark>=3.4.0<=3.4.9
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Nov 19, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Wireshark vulnerability?
The vulnerability ID for this Wireshark vulnerability is CVE-2021-39924.
2
What is the severity of CVE-2021-39924?
The severity of CVE-2021-39924 is high with a CVSS score of 7.5.
3
Which versions of Wireshark are affected by CVE-2021-39924?
Wireshark versions 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 are affected by CVE-2021-39924.
4
How can an attacker exploit CVE-2021-39924?
An attacker can exploit CVE-2021-39924 through packet injection or crafted capture file in the Bluetooth DHT dissector in Wireshark.
5
Is there a fix available for CVE-2021-39924?
Yes, there are fixes available for CVE-2021-39924. Please refer to the references for more information.