CVE-2021-39923
Fixed in a distro release EPSS 2%CVSS 7.5
Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Products: Wireshark Foundation Wireshark
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian:11 | wireshark | 3.4.10-0+deb11u1 |
| Debian:12 | wireshark | 3.6.0-1 |
| Debian:13 | wireshark | 3.6.0-1 |
| Debian:14 | wireshark | 3.6.0-1 |
| Debian:9 | wireshark | 2.6.20-0+deb9u2 |
| Ubuntu:Pro:14.04:LTS | wireshark | no fix |
| Ubuntu:Pro:16.04:LTS | wireshark | no fix |
| Ubuntu:Pro:18.04:LTS | wireshark | no fix |
| Ubuntu:Pro:20.04:LTS | wireshark | no fix |
| Ubuntu:Pro:22.04:LTS | wireshark | no fix |