CVE-2021-39925: Buffer Overflow
Published Nov 19, 2021
·Updated
Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected Software
6 affected componentsFixes available
debian/wireshark
2.6.20-0+deb10u42.6.20-0+deb10u73.4.10-0+deb11u14.0.6-1~deb12u14.0.10-1
Wireshark Wireshark>=3.2.0<=3.2.17
Wireshark Wireshark>=3.4.0<=3.4.9
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Nov 19, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-39925?
CVE-2021-39925 is a buffer overflow vulnerability in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17.
2
What is the severity of CVE-2021-39925?
CVE-2021-39925 has a severity rating of 7.5, which is considered high.
3
How does CVE-2021-39925 affect Wireshark?
CVE-2021-39925 allows denial of service via packet injection or crafted capture file in Wireshark versions 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17.
4
What software versions are affected by CVE-2021-39925?
CVE-2021-39925 affects Wireshark versions 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17.
5
How can I fix CVE-2021-39925?
To fix CVE-2021-39925, update Wireshark to version 3.4.10 or higher, or 3.2.18 or higher, depending on the affected version.