CVEvulnerability
CVE-2021-39924
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-11-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-834
Description
Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Affected configurations
• wireshark wireshark (>= 3.2.0 <= 3.2.17)
• wireshark wireshark (>= 3.4.0 <= 3.4.9)
• fedoraproject fedora 34
• fedoraproject fedora 35
• debian debian linux 9.0
Related
Weakness · CWE (1)
- CWE-834 Excessive Iteration weakness
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39924.json Third Party Advisory
- https://gitlab.com/wireshark/wireshark/-/issues/17677 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202210-04 Third Party Advisory
- https://www.debian.org/security/2021/dsa-5019 Third Party Advisory
- https://www.wireshark.org/security/wnpa-sec-2021-10.html Vendor Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39924.json Third Party Advisory
- https://gitlab.com/wireshark/wireshark/-/issues/17677 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202210-04 Third Party Advisory
- https://www.debian.org/security/2021/dsa-5019 Third Party Advisory
- https://www.wireshark.org/security/wnpa-sec-2021-10.html Vendor Advisory