CVE-2021-39923

Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

History

09 Mar 2022, 21:42

Type Values Removed Values Added
CPE cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
References (MLIST) https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html - (MLIST) https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html - Mailing List, Third Party Advisory

26 Dec 2021, 22:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html -

15 Dec 2021, 18:41

Type Values Removed Values Added
References (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17684 - (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17684 - Issue Tracking, Patch, Vendor Advisory
References (DEBIAN) https://www.debian.org/security/2021/dsa-5019 - (DEBIAN) https://www.debian.org/security/2021/dsa-5019 - Third Party Advisory
References (MISC) https://www.wireshark.org/security/wnpa-sec-2021-11.html - (MISC) https://www.wireshark.org/security/wnpa-sec-2021-11.html - Vendor Advisory
CWE CWE-476 CWE-834
CPE cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

11 Dec 2021, 12:15

Type Values Removed Values Added
References
  • (DEBIAN) https://www.debian.org/security/2021/dsa-5019 -

07 Dec 2021, 18:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/', 'name': 'FEDORA-2021-3747cf6107', 'tags': [], 'refsource': 'FEDORA'}
  • {'url': 'https://gitlab.com/wireshark/wireshark/-/issues/17705', 'name': 'https://gitlab.com/wireshark/wireshark/-/issues/17705', 'tags': ['Exploit', 'Issue Tracking', 'Patch', 'Third Party Advisory'], 'refsource': 'MISC'}
  • {'url': 'https://www.wireshark.org/security/wnpa-sec-2021-15.html', 'name': 'https://www.wireshark.org/security/wnpa-sec-2021-15.html', 'tags': ['Vendor Advisory'], 'refsource': 'MISC'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/', 'name': 'FEDORA-2021-97bd631e0a', 'tags': [], 'refsource': 'FEDORA'}
  • (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17684 -
  • (MISC) https://www.wireshark.org/security/wnpa-sec-2021-11.html -
Summary NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

03 Dec 2021, 03:15

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/ -
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/ -

24 Nov 2021, 13:54

Type Values Removed Values Added
References (CONFIRM) https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39923.json - (CONFIRM) https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39923.json - Third Party Advisory
References (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17705 - (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17705 - Exploit, Issue Tracking, Patch, Third Party Advisory
References (MISC) https://www.wireshark.org/security/wnpa-sec-2021-15.html - (MISC) https://www.wireshark.org/security/wnpa-sec-2021-15.html - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5
CWE CWE-476
CPE cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

19 Nov 2021, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-11-19 17:15

Updated : 2023-12-10 14:09


NVD link : CVE-2021-39923

Mitre link : CVE-2021-39923

CVE.ORG link : CVE-2021-39923


JSON object : View

Products Affected

debian

  • debian_linux

wireshark

  • wireshark
CWE
CWE-834

Excessive Iteration