CVE-2021-39928: Null Pointer Dereference
Published Nov 18, 2021
·Updated
NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected Software
16 affected componentsFixes available
debian/wireshark
2.6.20-0+deb10u42.6.20-0+deb10u73.4.10-0+deb11u14.0.6-1~deb12u14.0.10-1
Wireshark Wireshark>=3.2.0<3.2.18
Wireshark Wireshark>=3.4.0<3.4.10
Fedoraproject Fedora=34
Fedoraproject Fedora=35
Debian Debian Linux=9.0
alpine/wireshark>=3.2.0<3.4.13-r0
3.4.13-r0
alpine/wireshark>=3.2.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.2.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.2.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.2.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.2.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.2.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.2.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.2.0<3.4.11-r0
3.4.11-r0
alpine/wireshark>=3.2.0<3.4.11-r0
3.4.11-r0
Event History
Nov 18, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·07:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-39928.
2
What is the severity of CVE-2021-39928?
The severity of CVE-2021-39928 is high.
3
Which software versions are affected by CVE-2021-39928?
Wireshark versions 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 are affected.
4
How can CVE-2021-39928 be exploited?
CVE-2021-39928 can be exploited through packet injection or by using a crafted capture file.
5
Is there a fix available for CVE-2021-39928?
Yes, fixes are available for Wireshark versions 2.6.20-0+deb10u4, 2.6.20-0+deb10u7, 3.4.10-0+deb11u1, 4.0.6-1~deb12u1, and 4.0.10-1.