Input validation error in Wireshark - CVE-2021-39921

Vulnerability identifier: #VU58214

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-39921

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation in the Modbus dissector. A remote attacker can send specially crafted packets through the application and perform a denial of service (DoS) attack.

Wireshark
Gentoo Linux
Amazon Linux AMI
Oracle Solaris
SUSE Linux Enterprise Module for Desktop Applications
SUSE Linux Enterprise Module for Basesystem
Fedora
wireshark (Debian package)
wireshark-debuginfo
wireshark
libwsutil12-debuginfo
libwsutil12
libwiretap11-debuginfo
libwiretap11
libwireshark14-debuginfo
libwireshark14
wireshark-ui-qt-debuginfo
wireshark-ui-qt
wireshark-devel
wireshark-debugsource
net-analyzer/wireshark

Install updates from vendor's website.

Wireshark - addressed in versions 3.2.18, 3.4.10
wireshark (Debian package) - update to 3.4.10-0+deb11u1
wireshark-debuginfo - update to 3.4.10-3.62.1
wireshark - update to 3.4.10-3.62.1
libwsutil12-debuginfo - update to 3.4.10-3.62.1
libwsutil12 - update to 3.4.10-3.62.1
libwiretap11-debuginfo - update to 3.4.10-3.62.1
libwiretap11 - update to 3.4.10-3.62.1
libwireshark14-debuginfo - update to 3.4.10-3.62.1
libwireshark14 - update to 3.4.10-3.62.1
wireshark-ui-qt-debuginfo - update to 3.4.10-3.62.1
wireshark-ui-qt - update to 3.4.10-3.62.1
wireshark-devel - update to 3.4.10-3.62.1
wireshark-debugsource - update to 3.4.10-3.62.1
wireshark - addressed in versions 3.6.0-1.fc34, 3.6.0-1.fc35
net-analyzer/wireshark - update to 3.6.8
wireshark - update to 4.0.2-1

• https://www.wireshark.org/security/wnpa-sec-2021-14.html

• Multiple vulnerabilities in Wireshark
• Debian update for wireshark
• Multiple vulnerabilities in Oracle Solaris third-party software
• SUSE update for wireshark
• Gentoo update for Wireshark
• Amazon Linux AMI update for wireshark
• Fedora 34 update for wireshark
• Fedora 35 update for wireshark