CVE-2021-39923

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-39923
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-39923.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-39923
Downstream
Published
2021-11-19T17:15:08.457Z
Modified
2026-03-10T23:44:32.229432Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

References

Affected packages

Git / github.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://github.com/wireshark/wireshark
Events
Introduced
e0ed4cfa3d72110257da54c26ad3a28d282ef454
Last affected
f73d1bc180e75084e7f599d86007f0f31123db19
Introduced
9733f173ea5e6255e8da208ef183210aa264d948
Last affected
365e236f5efec8d00c840f68b0529e31e9b74a36
Database specific 
{
    "versions": [
        {
            "introduced": "3.2.0"
        },
        {
            "last_affected": "3.2.17"
        },
        {
            "introduced": "3.4.0"
        },
        {
            "last_affected": "3.4.9"
        }
    ]
}

Affected versions

v3.*
v3.2.0
v3.2.1
v3.2.10
v3.2.10rc0
v3.2.11
v3.2.11rc0
v3.2.12
v3.2.12rc0
v3.2.13
v3.2.13rc0
v3.2.14
v3.2.14rc0
v3.2.15
v3.2.15rc0
v3.2.16
v3.2.16rc0
v3.2.17
v3.2.17rc0
v3.2.1rc0
v3.2.2
v3.2.2rc0
v3.2.3
v3.2.3rc0
v3.2.4
v3.2.4rc0
v3.2.5
v3.2.5rc0
v3.2.6
v3.2.6rc0
v3.2.7
v3.2.7rc0
v3.2.8
v3.2.8rc0
v3.2.9
v3.2.9rc0
v3.4.0
v3.4.1
v3.4.1rc0
v3.4.2
v3.4.2rc0
v3.4.3
v3.4.3rc0
v3.4.4
v3.4.4rc0
v3.4.5
v3.4.5rc0
v3.4.6
v3.4.6rc0
v3.4.7
v3.4.7rc0
v3.4.8
v3.4.8rc0
v3.4.9
v3.4.9rc0
wireshark-3.*
wireshark-3.2.0
wireshark-3.2.1
wireshark-3.2.10
wireshark-3.2.11
wireshark-3.2.12
wireshark-3.2.13
wireshark-3.2.14
wireshark-3.2.15
wireshark-3.2.16
wireshark-3.2.17
wireshark-3.2.2
wireshark-3.2.3
wireshark-3.2.4
wireshark-3.2.5
wireshark-3.2.6
wireshark-3.2.7
wireshark-3.2.8
wireshark-3.2.9
wireshark-3.4.0
wireshark-3.4.1
wireshark-3.4.2
wireshark-3.4.3
wireshark-3.4.4
wireshark-3.4.5
wireshark-3.4.6
wireshark-3.4.7
wireshark-3.4.8
wireshark-3.4.9

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "11.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-39923.json"