PT-2021-5595 · Wireshark+5 · Wireshark+5

Published 2021-11-17 · Updated 2025-06-04 · CVE-2021-39929

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.2.0 through 3.2.17 Wireshark versions 3.4.0 through 3.4.9

Description The issue is caused by uncontrolled recursion in the Bluetooth DHT dissector. This can be exploited by a remote attacker to cause a denial of service by injecting specially crafted packets or using a crafted capture file.

Recommendations For Wireshark versions 3.2.0 through 3.2.17, update to a version that fixes the uncontrolled recursion issue in the Bluetooth DHT dissector. For Wireshark versions 3.4.0 through 3.4.9, update to a version that fixes the uncontrolled recursion issue in the Bluetooth DHT dissector. As a temporary workaround, consider disabling the Bluetooth DHT dissector until a patch is available.

Exploit

Fix

DoS

Uncontrolled Recursion

Weakness Enumeration

CWE-674

Related Identifiers

ALT-PU-2021-3354

ALT-PU-2022-1096

ALT-PU-2022-1368

ALT-PU-2022-1599

AZL-7416

BDU:2022-00029

CVE-2021-39929

DLA-2849-1

DSA-5019-1

MGASA-2021-0518

OPENSUSE-SU-2021:1566-1

OPENSUSE-SU-2021:3938-1

OPENSUSE-SU-2021_1566-1

OPENSUSE-SU-2021_3938-1

OPENSUSE-SU-2024:11641-1

SUSE-SU-2021:3938-1

USN-7552-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Suse

Ubuntu

Wireshark

References · 72

• 🔥 https://gitlab.com/wireshark/wireshark/-/issues/17651 · Exploit
• https://osv.dev/vulnerability/AZL-7416 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7552-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5019-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0582 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-39929 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-39929 · Security Note
• https://ubuntu.com/security/CVE-2022-0581 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39929 · Security Note
• https://osv.dev/vulnerability/DLA-2849-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0585 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4182 · Vendor Advisory