Home > Vulnerability Database > CVE-2021-39929

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2021-39929

Date: November 18, 2021

Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

Language: C

Severity Score

7.5

Related Resources (15)

Url: https://www.debian.org/security/2021/dsa-5019

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2021-39929

Url: https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html

Url: https://gitlab.com/wireshark/wireshark/-/issues/17651

Url: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39929.json

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/

Url: https://www.wireshark.org/security/wnpa-sec-2021-07.html

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/

Url: https://security.alpinelinux.org/vuln/CVE-2021-39929

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/

Url: https://nvd.nist.gov/vuln/detail/CVE-2021-39929

Url: https://security-tracker.debian.org/tracker/CVE-2021-39929

Url: https://security.gentoo.org/glsa/202210-04

Url: https://www.mend.io/vulnerability-database/CVE-2021-39929

Severity Score

7.5

Weakness Type (CWE)

Uncontrolled Recursion

CWE-674

CVSS v3.1

Base Score:	7.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	HIGH

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us