Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Weakness
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wireshark | Wireshark | 3.2.0 (including) | 3.2.17 (including) |
| Wireshark | Wireshark | 3.4.0 (including) | 3.4.9 (including) |
| Wireshark | Ubuntu | bionic | * |
| Wireshark | Ubuntu | focal | * |
| Wireshark | Ubuntu | hirsute | * |
| Wireshark | Ubuntu | impish | * |
| Wireshark | Ubuntu | kinetic | * |
| Wireshark | Ubuntu | trusty | * |
| Wireshark | Ubuntu | trusty/esm | * |
| Wireshark | Ubuntu | upstream | * |
| Wireshark | Ubuntu | xenial | * |
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39923.json
- https://gitlab.com/wireshark/wireshark/-/issues/17684
- https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html
- https://www.debian.org/security/2021/dsa-5019
- https://www.wireshark.org/security/wnpa-sec-2021-11.html
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39923.json
- https://gitlab.com/wireshark/wireshark/-/issues/17684
- https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html
- https://www.debian.org/security/2021/dsa-5019
- https://www.wireshark.org/security/wnpa-sec-2021-11.html