CVE-2021-39923

Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*
cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

History

26 Dec 2021, 22:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html -

15 Dec 2021, 18:41

Type Values Removed Values Added
References (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17684 - (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17684 - Issue Tracking, Patch, Vendor Advisory
References (DEBIAN) https://www.debian.org/security/2021/dsa-5019 - (DEBIAN) https://www.debian.org/security/2021/dsa-5019 - Third Party Advisory
References (MISC) https://www.wireshark.org/security/wnpa-sec-2021-11.html - (MISC) https://www.wireshark.org/security/wnpa-sec-2021-11.html - Vendor Advisory
CPE cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
CWE CWE-476 CWE-834

11 Dec 2021, 12:15

Type Values Removed Values Added
References
  • (DEBIAN) https://www.debian.org/security/2021/dsa-5019 -

07 Dec 2021, 18:15

Type Values Removed Values Added
Summary NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/', 'name': 'FEDORA-2021-3747cf6107', 'tags': [], 'refsource': 'FEDORA'}
  • {'url': 'https://gitlab.com/wireshark/wireshark/-/issues/17705', 'name': 'https://gitlab.com/wireshark/wireshark/-/issues/17705', 'tags': ['Exploit', 'Issue Tracking', 'Patch', 'Third Party Advisory'], 'refsource': 'MISC'}
  • {'url': 'https://www.wireshark.org/security/wnpa-sec-2021-15.html', 'name': 'https://www.wireshark.org/security/wnpa-sec-2021-15.html', 'tags': ['Vendor Advisory'], 'refsource': 'MISC'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/', 'name': 'FEDORA-2021-97bd631e0a', 'tags': [], 'refsource': 'FEDORA'}
  • (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17684 -
  • (MISC) https://www.wireshark.org/security/wnpa-sec-2021-11.html -

03 Dec 2021, 03:15

Type Values Removed Values Added
References
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/ -
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/ -

24 Nov 2021, 13:54

Type Values Removed Values Added
References (CONFIRM) https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39923.json - (CONFIRM) https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39923.json - Third Party Advisory
References (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17705 - (MISC) https://gitlab.com/wireshark/wireshark/-/issues/17705 - Exploit, Issue Tracking, Patch, Third Party Advisory
References (MISC) https://www.wireshark.org/security/wnpa-sec-2021-15.html - (MISC) https://www.wireshark.org/security/wnpa-sec-2021-15.html - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5
CWE CWE-476
CPE cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

19 Nov 2021, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-11-19 17:15

Updated : 2021-12-26 22:15


NVD link : CVE-2021-39923

Mitre link : CVE-2021-39923


JSON object : View

Products Affected

debian

  • debian_linux

wireshark

  • wireshark
CWE
CWE-834

Excessive Iteration