CVE-2021-39926: Buffer Overflow
Buffer overflow in the Bluetooth HCIISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-39926?
CVE-2021-39926 is a vulnerability that allows denial of service via packet injection or crafted capture file in the Bluetooth HCI_ISO dissector in Wireshark versions 3.4.0 to 3.4.9.
How severe is CVE-2021-39926?
CVE-2021-39926 is classified as a high severity vulnerability with a severity rating of 7.5 out of 10.
Which software versions are affected by CVE-2021-39926?
Wireshark versions 3.4.0 to 3.4.9 are affected by CVE-2021-39926.
How can CVE-2021-39926 be fixed?
To fix CVE-2021-39926, update your Wireshark software to version 3.4.10 or later.
Where can I find more information about CVE-2021-39926?
More information about CVE-2021-39926 can be found at the following references: [GitLab Issue](https://gitlab.com/wireshark/wireshark/-/issues/17649), [Wireshark Security Advisory](https://www.wireshark.org/security/wnpa-sec-2021-08.html), [Debian Security Tracker](https://security-tracker.debian.org/tracker/CVE-2021-39926).