Input validation error in Wireshark - CVE-2021-39929

Vulnerability identifier: #VU58216

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-39929

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation in the Bluetooth DHT dissector. A remote attacker can send specially crafted packets through the application and perform a denial of service (DoS) attack.

Wireshark
Amazon Linux AMI
Gentoo Linux
Oracle Solaris
Ubuntu
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Desktop Applications
Fedora
wireshark (Debian package)
wireshark (Ubuntu package)
libwsutil12-debuginfo
wireshark
libwsutil12
libwiretap11-debuginfo
libwiretap11
libwireshark14-debuginfo
libwireshark14
wireshark-ui-qt-debuginfo
wireshark-ui-qt
wireshark-devel
wireshark-debugsource
wireshark-debuginfo
net-analyzer/wireshark

Install updates from vendor's website.

Wireshark - addressed in versions 3.2.18, 3.4.10
wireshark (Debian package) - update to 3.4.10-0+deb11u1
wireshark (Ubuntu package) - addressed in versions 2.6.10-1~ubuntu14.04.0~esm3, 2.6.10-1~ubuntu16.04.0+esm2, 2.6.10-1~ubuntu18.04.0+esm2, 3.2.3-1ubuntu0.1~esm2, 3.6.2-2ubuntu0.1~esm1
libwsutil12-debuginfo - update to 3.4.10-3.62.1
wireshark - update to 3.4.10-3.62.1
libwsutil12 - update to 3.4.10-3.62.1
libwiretap11-debuginfo - update to 3.4.10-3.62.1
libwiretap11 - update to 3.4.10-3.62.1
libwireshark14-debuginfo - update to 3.4.10-3.62.1
libwireshark14 - update to 3.4.10-3.62.1
wireshark-ui-qt-debuginfo - update to 3.4.10-3.62.1
wireshark-ui-qt - update to 3.4.10-3.62.1
wireshark-devel - update to 3.4.10-3.62.1
wireshark-debugsource - update to 3.4.10-3.62.1
wireshark-debuginfo - update to 3.4.10-3.62.1
wireshark - addressed in versions 3.6.0-1.fc34, 3.6.0-1.fc35
net-analyzer/wireshark - update to 3.6.8
wireshark - update to 4.0.2-1

• https://www.wireshark.org/security/wnpa-sec-2021-07.html

• Multiple vulnerabilities in Wireshark
• Debian update for wireshark
• Multiple vulnerabilities in Oracle Solaris third-party software
• SUSE update for wireshark
• Gentoo update for Wireshark
• Amazon Linux AMI update for wireshark
• Fedora 34 update for wireshark
• Fedora 35 update for wireshark
• Ubuntu update for wireshark