CVE-2021-39923

Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

History

09 Mar 2022, 21:42

Type Values Removed Values Added
CPE cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
References (MLIST) https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html - (MLIST) https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html - Mailing List, Third Party Advisory

26 Dec 2021, 22:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html -

15 Dec 2021, 18:41

Type Values Removed Values Added
CWE CWE-476 CWE-834
CPE cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
References (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17684 - (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17684 - Issue Tracking, Patch, Vendor Advisory
References (DEBIAN) https://www.debian.org/security/2021/dsa-5019 - (DEBIAN) https://www.debian.org/security/2021/dsa-5019 - Third Party Advisory
References (MISC) https://www.wireshark.org/security/wnpa-sec-2021-11.html - (MISC) https://www.wireshark.org/security/wnpa-sec-2021-11.html - Vendor Advisory

11 Dec 2021, 12:15

Type Values Removed Values Added
References
  • (DEBIAN) https://www.debian.org/security/2021/dsa-5019 -

07 Dec 2021, 18:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/', 'name': 'FEDORA-2021-3747cf6107', 'tags': [], 'refsource': 'FEDORA'}
  • {'url': 'https://gitlab.com/wireshark/wireshark/-/issues/17705', 'name': 'https://gitlab.com/wireshark/wireshark/-/issues/17705', 'tags': ['Exploit', 'Issue Tracking', 'Patch', 'Third Party Advisory'], 'refsource': 'MISC'}
  • {'url': 'https://www.wireshark.org/security/wnpa-sec-2021-15.html', 'name': 'https://www.wireshark.org/security/wnpa-sec-2021-15.html', 'tags': ['Vendor Advisory'], 'refsource': 'MISC'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/', 'name': 'FEDORA-2021-97bd631e0a', 'tags': [], 'refsource': 'FEDORA'}
  • (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17684 -
  • (MISC) https://www.wireshark.org/security/wnpa-sec-2021-11.html -
Summary NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

03 Dec 2021, 03:15

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/ -
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/ -

24 Nov 2021, 13:54

Type Values Removed Values Added
CWE CWE-476
CPE cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5
References (CONFIRM) https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39923.json - (CONFIRM) https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39923.json - Third Party Advisory
References (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17705 - (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17705 - Exploit, Issue Tracking, Patch, Third Party Advisory
References (MISC) https://www.wireshark.org/security/wnpa-sec-2021-15.html - (MISC) https://www.wireshark.org/security/wnpa-sec-2021-15.html - Vendor Advisory

19 Nov 2021, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-11-19 17:15

Updated : 2022-03-09 21:42


NVD link : CVE-2021-39923

Mitre link : CVE-2021-39923


JSON object : View

Products Affected

wireshark

  • wireshark

debian

  • debian_linux
CWE
CWE-834

Excessive Iteration