csaf_opensuse - opensuse-su-2021:3938-1

Vulnerability from csaf_opensuse

Published

2021-12-06 13:42

Modified

2021-12-06 13:42

Summary

Security update for wireshark

Notes

Title of the patch

Security update for wireshark

Description of the patch

This update for wireshark fixes the following issues: - Update to Wireshark 3.4.10: - CVE-2021-39920: IPPUSB dissector crash (bsc#1192830). - CVE-2021-39921: Modbus dissector crash (bsc#1192830). - CVE-2021-39922: C12.22 dissector crash (bsc#1192830). - CVE-2021-39924: Bluetooth DHT dissector large loop (bsc#1192830). - CVE-2021-39925: Bluetooth SDP dissector crash (bsc#1192830). - CVE-2021-39926: Bluetooth HCI_ISO dissector crash (bsc#1192830). - CVE-2021-39928: IEEE 802.11 dissector crash (bsc#1192830). - CVE-2021-39929: Bluetooth DHT dissector crash (bsc#1192830).

Patchnames

openSUSE-SLE-15.3-2021-3938

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for wireshark",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for wireshark fixes the following issues:\n\n- Update to Wireshark 3.4.10:\n- CVE-2021-39920: IPPUSB dissector crash (bsc#1192830).\n- CVE-2021-39921: Modbus dissector crash (bsc#1192830).\n- CVE-2021-39922: C12.22 dissector crash (bsc#1192830).\n- CVE-2021-39924: Bluetooth DHT dissector large loop (bsc#1192830).\n- CVE-2021-39925: Bluetooth SDP dissector crash (bsc#1192830).\n- CVE-2021-39926: Bluetooth HCI_ISO dissector crash (bsc#1192830).\n- CVE-2021-39928: IEEE 802.11 dissector crash (bsc#1192830).\n- CVE-2021-39929: Bluetooth DHT dissector crash (bsc#1192830).      \n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "openSUSE-SLE-15.3-2021-3938",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_3938-1.json",
         },
         {
            category: "self",
            summary: "URL for openSUSE-SU-2021:3938-1",
            url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2AUQBQMT4O7Y26OSAOSJT4MNYT4MQ6ME/",
         },
         {
            category: "self",
            summary: "E-Mail link for openSUSE-SU-2021:3938-1",
            url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2AUQBQMT4O7Y26OSAOSJT4MNYT4MQ6ME/",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192830",
            url: "https://bugzilla.suse.com/1192830",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-39920 page",
            url: "https://www.suse.com/security/cve/CVE-2021-39920/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-39921 page",
            url: "https://www.suse.com/security/cve/CVE-2021-39921/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-39922 page",
            url: "https://www.suse.com/security/cve/CVE-2021-39922/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-39924 page",
            url: "https://www.suse.com/security/cve/CVE-2021-39924/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-39925 page",
            url: "https://www.suse.com/security/cve/CVE-2021-39925/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-39926 page",
            url: "https://www.suse.com/security/cve/CVE-2021-39926/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-39928 page",
            url: "https://www.suse.com/security/cve/CVE-2021-39928/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-39929 page",
            url: "https://www.suse.com/security/cve/CVE-2021-39929/",
         },
      ],
      title: "Security update for wireshark",
      tracking: {
         current_release_date: "2021-12-06T13:42:21Z",
         generator: {
            date: "2021-12-06T13:42:21Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "openSUSE-SU-2021:3938-1",
         initial_release_date: "2021-12-06T13:42:21Z",
         revision_history: [
            {
               date: "2021-12-06T13:42:21Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libwireshark14-3.4.10-3.62.1.aarch64",
                        product: {
                           name: "libwireshark14-3.4.10-3.62.1.aarch64",
                           product_id: "libwireshark14-3.4.10-3.62.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libwiretap11-3.4.10-3.62.1.aarch64",
                        product: {
                           name: "libwiretap11-3.4.10-3.62.1.aarch64",
                           product_id: "libwiretap11-3.4.10-3.62.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libwsutil12-3.4.10-3.62.1.aarch64",
                        product: {
                           name: "libwsutil12-3.4.10-3.62.1.aarch64",
                           product_id: "libwsutil12-3.4.10-3.62.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-3.4.10-3.62.1.aarch64",
                        product: {
                           name: "wireshark-3.4.10-3.62.1.aarch64",
                           product_id: "wireshark-3.4.10-3.62.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-devel-3.4.10-3.62.1.aarch64",
                        product: {
                           name: "wireshark-devel-3.4.10-3.62.1.aarch64",
                           product_id: "wireshark-devel-3.4.10-3.62.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                        product: {
                           name: "wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                           product_id: "wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libwireshark14-3.4.10-3.62.1.ppc64le",
                        product: {
                           name: "libwireshark14-3.4.10-3.62.1.ppc64le",
                           product_id: "libwireshark14-3.4.10-3.62.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libwiretap11-3.4.10-3.62.1.ppc64le",
                        product: {
                           name: "libwiretap11-3.4.10-3.62.1.ppc64le",
                           product_id: "libwiretap11-3.4.10-3.62.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libwsutil12-3.4.10-3.62.1.ppc64le",
                        product: {
                           name: "libwsutil12-3.4.10-3.62.1.ppc64le",
                           product_id: "libwsutil12-3.4.10-3.62.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-3.4.10-3.62.1.ppc64le",
                        product: {
                           name: "wireshark-3.4.10-3.62.1.ppc64le",
                           product_id: "wireshark-3.4.10-3.62.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-devel-3.4.10-3.62.1.ppc64le",
                        product: {
                           name: "wireshark-devel-3.4.10-3.62.1.ppc64le",
                           product_id: "wireshark-devel-3.4.10-3.62.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                        product: {
                           name: "wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                           product_id: "wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libwireshark14-3.4.10-3.62.1.s390x",
                        product: {
                           name: "libwireshark14-3.4.10-3.62.1.s390x",
                           product_id: "libwireshark14-3.4.10-3.62.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libwiretap11-3.4.10-3.62.1.s390x",
                        product: {
                           name: "libwiretap11-3.4.10-3.62.1.s390x",
                           product_id: "libwiretap11-3.4.10-3.62.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libwsutil12-3.4.10-3.62.1.s390x",
                        product: {
                           name: "libwsutil12-3.4.10-3.62.1.s390x",
                           product_id: "libwsutil12-3.4.10-3.62.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-3.4.10-3.62.1.s390x",
                        product: {
                           name: "wireshark-3.4.10-3.62.1.s390x",
                           product_id: "wireshark-3.4.10-3.62.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-devel-3.4.10-3.62.1.s390x",
                        product: {
                           name: "wireshark-devel-3.4.10-3.62.1.s390x",
                           product_id: "wireshark-devel-3.4.10-3.62.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-ui-qt-3.4.10-3.62.1.s390x",
                        product: {
                           name: "wireshark-ui-qt-3.4.10-3.62.1.s390x",
                           product_id: "wireshark-ui-qt-3.4.10-3.62.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libwireshark14-3.4.10-3.62.1.x86_64",
                        product: {
                           name: "libwireshark14-3.4.10-3.62.1.x86_64",
                           product_id: "libwireshark14-3.4.10-3.62.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libwiretap11-3.4.10-3.62.1.x86_64",
                        product: {
                           name: "libwiretap11-3.4.10-3.62.1.x86_64",
                           product_id: "libwiretap11-3.4.10-3.62.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libwsutil12-3.4.10-3.62.1.x86_64",
                        product: {
                           name: "libwsutil12-3.4.10-3.62.1.x86_64",
                           product_id: "libwsutil12-3.4.10-3.62.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-3.4.10-3.62.1.x86_64",
                        product: {
                           name: "wireshark-3.4.10-3.62.1.x86_64",
                           product_id: "wireshark-3.4.10-3.62.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-devel-3.4.10-3.62.1.x86_64",
                        product: {
                           name: "wireshark-devel-3.4.10-3.62.1.x86_64",
                           product_id: "wireshark-devel-3.4.10-3.62.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "wireshark-ui-qt-3.4.10-3.62.1.x86_64",
                        product: {
                           name: "wireshark-ui-qt-3.4.10-3.62.1.x86_64",
                           product_id: "wireshark-ui-qt-3.4.10-3.62.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.3",
                        product: {
                           name: "openSUSE Leap 15.3",
                           product_id: "openSUSE Leap 15.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.3",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libwireshark14-3.4.10-3.62.1.aarch64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
            },
            product_reference: "libwireshark14-3.4.10-3.62.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libwireshark14-3.4.10-3.62.1.ppc64le as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
            },
            product_reference: "libwireshark14-3.4.10-3.62.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libwireshark14-3.4.10-3.62.1.s390x as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
            },
            product_reference: "libwireshark14-3.4.10-3.62.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libwireshark14-3.4.10-3.62.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
            },
            product_reference: "libwireshark14-3.4.10-3.62.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libwiretap11-3.4.10-3.62.1.aarch64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
            },
            product_reference: "libwiretap11-3.4.10-3.62.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libwiretap11-3.4.10-3.62.1.ppc64le as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
            },
            product_reference: "libwiretap11-3.4.10-3.62.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libwiretap11-3.4.10-3.62.1.s390x as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
            },
            product_reference: "libwiretap11-3.4.10-3.62.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libwiretap11-3.4.10-3.62.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
            },
            product_reference: "libwiretap11-3.4.10-3.62.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libwsutil12-3.4.10-3.62.1.aarch64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
            },
            product_reference: "libwsutil12-3.4.10-3.62.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libwsutil12-3.4.10-3.62.1.ppc64le as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
            },
            product_reference: "libwsutil12-3.4.10-3.62.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libwsutil12-3.4.10-3.62.1.s390x as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
            },
            product_reference: "libwsutil12-3.4.10-3.62.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libwsutil12-3.4.10-3.62.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
            },
            product_reference: "libwsutil12-3.4.10-3.62.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-3.4.10-3.62.1.aarch64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
            },
            product_reference: "wireshark-3.4.10-3.62.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-3.4.10-3.62.1.ppc64le as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
            },
            product_reference: "wireshark-3.4.10-3.62.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-3.4.10-3.62.1.s390x as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
            },
            product_reference: "wireshark-3.4.10-3.62.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-3.4.10-3.62.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
            },
            product_reference: "wireshark-3.4.10-3.62.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-devel-3.4.10-3.62.1.aarch64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
            },
            product_reference: "wireshark-devel-3.4.10-3.62.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-devel-3.4.10-3.62.1.ppc64le as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
            },
            product_reference: "wireshark-devel-3.4.10-3.62.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-devel-3.4.10-3.62.1.s390x as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
            },
            product_reference: "wireshark-devel-3.4.10-3.62.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-devel-3.4.10-3.62.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
            },
            product_reference: "wireshark-devel-3.4.10-3.62.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-ui-qt-3.4.10-3.62.1.aarch64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
            },
            product_reference: "wireshark-ui-qt-3.4.10-3.62.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-ui-qt-3.4.10-3.62.1.ppc64le as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
            },
            product_reference: "wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-ui-qt-3.4.10-3.62.1.s390x as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
            },
            product_reference: "wireshark-ui-qt-3.4.10-3.62.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "wireshark-ui-qt-3.4.10-3.62.1.x86_64 as component of openSUSE Leap 15.3",
               product_id: "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
            },
            product_reference: "wireshark-ui-qt-3.4.10-3.62.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.3",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2021-39920",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-39920",
            },
         ],
         notes: [
            {
               category: "general",
               text: "NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-39920",
               url: "https://www.suse.com/security/cve/CVE-2021-39920",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192830 for CVE-2021-39920",
               url: "https://bugzilla.suse.com/1192830",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-12-06T13:42:21Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-39920",
      },
      {
         cve: "CVE-2021-39921",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-39921",
            },
         ],
         notes: [
            {
               category: "general",
               text: "NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-39921",
               url: "https://www.suse.com/security/cve/CVE-2021-39921",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192830 for CVE-2021-39921",
               url: "https://bugzilla.suse.com/1192830",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-12-06T13:42:21Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-39921",
      },
      {
         cve: "CVE-2021-39922",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-39922",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-39922",
               url: "https://www.suse.com/security/cve/CVE-2021-39922",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192830 for CVE-2021-39922",
               url: "https://bugzilla.suse.com/1192830",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-12-06T13:42:21Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-39922",
      },
      {
         cve: "CVE-2021-39924",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-39924",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-39924",
               url: "https://www.suse.com/security/cve/CVE-2021-39924",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192830 for CVE-2021-39924",
               url: "https://bugzilla.suse.com/1192830",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-12-06T13:42:21Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-39924",
      },
      {
         cve: "CVE-2021-39925",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-39925",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-39925",
               url: "https://www.suse.com/security/cve/CVE-2021-39925",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192830 for CVE-2021-39925",
               url: "https://bugzilla.suse.com/1192830",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-12-06T13:42:21Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-39925",
      },
      {
         cve: "CVE-2021-39926",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-39926",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-39926",
               url: "https://www.suse.com/security/cve/CVE-2021-39926",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192830 for CVE-2021-39926",
               url: "https://bugzilla.suse.com/1192830",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-12-06T13:42:21Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-39926",
      },
      {
         cve: "CVE-2021-39928",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-39928",
            },
         ],
         notes: [
            {
               category: "general",
               text: "NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-39928",
               url: "https://www.suse.com/security/cve/CVE-2021-39928",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192830 for CVE-2021-39928",
               url: "https://bugzilla.suse.com/1192830",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-12-06T13:42:21Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-39928",
      },
      {
         cve: "CVE-2021-39929",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-39929",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
               "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-39929",
               url: "https://www.suse.com/security/cve/CVE-2021-39929",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192830 for CVE-2021-39929",
               url: "https://bugzilla.suse.com/1192830",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwireshark14-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwiretap11-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:libwsutil12-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-devel-3.4.10-3.62.1.x86_64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.aarch64",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.ppc64le",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.s390x",
                  "openSUSE Leap 15.3:wireshark-ui-qt-3.4.10-3.62.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-12-06T13:42:21Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-39929",
      },
   ],
}

cve-2021-39920

Vulnerability from cvelistv5

Published

2021-11-18 00:00

Modified

2024-08-04 02:20

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2021-15.html
	https://gitlab.com/wireshark/wireshark/-/issues/17705
	https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39920.json
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/	vendor-advisory
	https://www.debian.org/security/2021/dsa-5019	vendor-advisory
	https://security.gentoo.org/glsa/202210-04	vendor-advisory

Impacted products

	Vendor	Product	Version
	Wireshark Foundation	Wireshark	Version: >=3.4.0, <3.4.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T02:20:34.127Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2021-15.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/wireshark/wireshark/-/issues/17705",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39920.json",
               },
               {
                  name: "FEDORA-2021-97bd631e0a",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
               },
               {
                  name: "FEDORA-2021-3747cf6107",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
               },
               {
                  name: "DSA-5019",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-5019",
               },
               {
                  name: "GLSA-202210-04",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202210-04",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Wireshark",
               vendor: "Wireshark Foundation",
               versions: [
                  {
                     status: "affected",
                     version: ">=3.4.0, <3.4.10",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "TODO",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Null pointer dereference in Wireshark",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-16T00:00:00",
            orgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
            shortName: "GitLab",
         },
         references: [
            {
               url: "https://www.wireshark.org/security/wnpa-sec-2021-15.html",
            },
            {
               url: "https://gitlab.com/wireshark/wireshark/-/issues/17705",
            },
            {
               url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39920.json",
            },
            {
               name: "FEDORA-2021-97bd631e0a",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
            },
            {
               name: "FEDORA-2021-3747cf6107",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
            },
            {
               name: "DSA-5019",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2021/dsa-5019",
            },
            {
               name: "GLSA-202210-04",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/202210-04",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
      assignerShortName: "GitLab",
      cveId: "CVE-2021-39920",
      datePublished: "2021-11-18T00:00:00",
      dateReserved: "2021-08-23T00:00:00",
      dateUpdated: "2024-08-04T02:20:34.127Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-39922

Vulnerability from cvelistv5

Published

2021-11-19 00:00

Modified

2024-08-04 02:20

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2021-12.html
	https://gitlab.com/wireshark/wireshark/-/issues/17636
	https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39922.json
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/	vendor-advisory
	https://www.debian.org/security/2021/dsa-5019	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html	mailing-list
	https://security.gentoo.org/glsa/202210-04	vendor-advisory

Impacted products

	Vendor	Product	Version
	Wireshark Foundation	Wireshark	Version: >=3.4.0, <3.4.10 Version: >=3.2.0, <3.2.18

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T02:20:34.154Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2021-12.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/wireshark/wireshark/-/issues/17636",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39922.json",
               },
               {
                  name: "FEDORA-2021-97bd631e0a",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
               },
               {
                  name: "FEDORA-2021-3747cf6107",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
               },
               {
                  name: "DSA-5019",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-5019",
               },
               {
                  name: "[debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
               },
               {
                  name: "GLSA-202210-04",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202210-04",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Wireshark",
               vendor: "Wireshark Foundation",
               versions: [
                  {
                     status: "affected",
                     version: ">=3.4.0, <3.4.10",
                  },
                  {
                     status: "affected",
                     version: ">=3.2.0, <3.2.18",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Doneing",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Buffer copy without checking size of input ('classic buffer overflow') in Wireshark",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-16T00:00:00",
            orgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
            shortName: "GitLab",
         },
         references: [
            {
               url: "https://www.wireshark.org/security/wnpa-sec-2021-12.html",
            },
            {
               url: "https://gitlab.com/wireshark/wireshark/-/issues/17636",
            },
            {
               url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39922.json",
            },
            {
               name: "FEDORA-2021-97bd631e0a",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
            },
            {
               name: "FEDORA-2021-3747cf6107",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
            },
            {
               name: "DSA-5019",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2021/dsa-5019",
            },
            {
               name: "[debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
            },
            {
               name: "GLSA-202210-04",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/202210-04",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
      assignerShortName: "GitLab",
      cveId: "CVE-2021-39922",
      datePublished: "2021-11-19T00:00:00",
      dateReserved: "2021-08-23T00:00:00",
      dateUpdated: "2024-08-04T02:20:34.154Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-39926

Vulnerability from cvelistv5

Published

2021-11-19 00:00

Modified

2024-08-04 02:20

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2021-08.html
	https://gitlab.com/wireshark/wireshark/-/issues/17649
	https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39926.json
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/	vendor-advisory
	https://www.debian.org/security/2021/dsa-5019	vendor-advisory
	https://security.gentoo.org/glsa/202210-04	vendor-advisory

Impacted products

	Vendor	Product	Version
	Wireshark Foundation	Wireshark	Version: >=3.4.0, <3.4.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T02:20:34.099Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2021-08.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/wireshark/wireshark/-/issues/17649",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39926.json",
               },
               {
                  name: "FEDORA-2021-97bd631e0a",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
               },
               {
                  name: "FEDORA-2021-3747cf6107",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
               },
               {
                  name: "DSA-5019",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-5019",
               },
               {
                  name: "GLSA-202210-04",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202210-04",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Wireshark",
               vendor: "Wireshark Foundation",
               versions: [
                  {
                     status: "affected",
                     version: ">=3.4.0, <3.4.10",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Doneing",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Buffer copy without checking size of input ('classic buffer overflow') in Wireshark",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-16T00:00:00",
            orgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
            shortName: "GitLab",
         },
         references: [
            {
               url: "https://www.wireshark.org/security/wnpa-sec-2021-08.html",
            },
            {
               url: "https://gitlab.com/wireshark/wireshark/-/issues/17649",
            },
            {
               url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39926.json",
            },
            {
               name: "FEDORA-2021-97bd631e0a",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
            },
            {
               name: "FEDORA-2021-3747cf6107",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
            },
            {
               name: "DSA-5019",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2021/dsa-5019",
            },
            {
               name: "GLSA-202210-04",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/202210-04",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
      assignerShortName: "GitLab",
      cveId: "CVE-2021-39926",
      datePublished: "2021-11-19T00:00:00",
      dateReserved: "2021-08-23T00:00:00",
      dateUpdated: "2024-08-04T02:20:34.099Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-39924

Vulnerability from cvelistv5

Published

2021-11-19 00:00

Modified

2024-08-04 02:20

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2021-10.html
	https://gitlab.com/wireshark/wireshark/-/issues/17677
	https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39924.json
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/	vendor-advisory
	https://www.debian.org/security/2021/dsa-5019	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html	mailing-list
	https://security.gentoo.org/glsa/202210-04	vendor-advisory

Impacted products

	Vendor	Product	Version
	Wireshark Foundation	Wireshark	Version: >=3.4.0, <3.4.10 Version: >=3.2.0, <3.2.18

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T02:20:34.134Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2021-10.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/wireshark/wireshark/-/issues/17677",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39924.json",
               },
               {
                  name: "FEDORA-2021-97bd631e0a",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
               },
               {
                  name: "FEDORA-2021-3747cf6107",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
               },
               {
                  name: "DSA-5019",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-5019",
               },
               {
                  name: "[debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
               },
               {
                  name: "GLSA-202210-04",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202210-04",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Wireshark",
               vendor: "Wireshark Foundation",
               versions: [
                  {
                     status: "affected",
                     version: ">=3.4.0, <3.4.10",
                  },
                  {
                     status: "affected",
                     version: ">=3.2.0, <3.2.18",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Excessive iteration in Wireshark",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-16T00:00:00",
            orgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
            shortName: "GitLab",
         },
         references: [
            {
               url: "https://www.wireshark.org/security/wnpa-sec-2021-10.html",
            },
            {
               url: "https://gitlab.com/wireshark/wireshark/-/issues/17677",
            },
            {
               url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39924.json",
            },
            {
               name: "FEDORA-2021-97bd631e0a",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
            },
            {
               name: "FEDORA-2021-3747cf6107",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
            },
            {
               name: "DSA-5019",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2021/dsa-5019",
            },
            {
               name: "[debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
            },
            {
               name: "GLSA-202210-04",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/202210-04",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
      assignerShortName: "GitLab",
      cveId: "CVE-2021-39924",
      datePublished: "2021-11-19T00:00:00",
      dateReserved: "2021-08-23T00:00:00",
      dateUpdated: "2024-08-04T02:20:34.134Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-39921

Vulnerability from cvelistv5

Published

2021-11-19 00:00

Modified

2024-08-04 02:20

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2021-14.html
	https://gitlab.com/wireshark/wireshark/-/issues/17703
	https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39921.json
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/	vendor-advisory
	https://www.debian.org/security/2021/dsa-5019	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html	mailing-list
	https://security.gentoo.org/glsa/202210-04	vendor-advisory

Impacted products

	Vendor	Product	Version
	Wireshark Foundation	Wireshark	Version: >=3.4.0, <3.4.10 Version: >=3.2.0, <3.2.18

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T02:20:34.143Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2021-14.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/wireshark/wireshark/-/issues/17703",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39921.json",
               },
               {
                  name: "FEDORA-2021-97bd631e0a",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
               },
               {
                  name: "FEDORA-2021-3747cf6107",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
               },
               {
                  name: "DSA-5019",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-5019",
               },
               {
                  name: "[debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
               },
               {
                  name: "GLSA-202210-04",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202210-04",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Wireshark",
               vendor: "Wireshark Foundation",
               versions: [
                  {
                     status: "affected",
                     version: ">=3.4.0, <3.4.10",
                  },
                  {
                     status: "affected",
                     version: ">=3.2.0, <3.2.18",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Null pointer dereference in Wireshark",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-16T00:00:00",
            orgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
            shortName: "GitLab",
         },
         references: [
            {
               url: "https://www.wireshark.org/security/wnpa-sec-2021-14.html",
            },
            {
               url: "https://gitlab.com/wireshark/wireshark/-/issues/17703",
            },
            {
               url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39921.json",
            },
            {
               name: "FEDORA-2021-97bd631e0a",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
            },
            {
               name: "FEDORA-2021-3747cf6107",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
            },
            {
               name: "DSA-5019",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2021/dsa-5019",
            },
            {
               name: "[debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
            },
            {
               name: "GLSA-202210-04",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/202210-04",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
      assignerShortName: "GitLab",
      cveId: "CVE-2021-39921",
      datePublished: "2021-11-19T00:00:00",
      dateReserved: "2021-08-23T00:00:00",
      dateUpdated: "2024-08-04T02:20:34.143Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-39925

Vulnerability from cvelistv5

Published

2021-11-19 00:00

Modified

2024-08-04 02:20

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2021-09.html
	https://gitlab.com/wireshark/wireshark/-/issues/17635
	https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39925.json
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/	vendor-advisory
	https://www.debian.org/security/2021/dsa-5019	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html	mailing-list
	https://security.gentoo.org/glsa/202210-04	vendor-advisory

Impacted products

	Vendor	Product	Version
	Wireshark Foundation	Wireshark	Version: >=3.4.0, <3.4.10 Version: >=3.2.0, <3.2.18

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T02:20:34.143Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2021-09.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/wireshark/wireshark/-/issues/17635",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39925.json",
               },
               {
                  name: "FEDORA-2021-97bd631e0a",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
               },
               {
                  name: "FEDORA-2021-3747cf6107",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
               },
               {
                  name: "DSA-5019",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-5019",
               },
               {
                  name: "[debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
               },
               {
                  name: "GLSA-202210-04",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202210-04",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Wireshark",
               vendor: "Wireshark Foundation",
               versions: [
                  {
                     status: "affected",
                     version: ">=3.4.0, <3.4.10",
                  },
                  {
                     status: "affected",
                     version: ">=3.2.0, <3.2.18",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Doneing",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Buffer copy without checking size of input ('classic buffer overflow') in Wireshark",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-16T00:00:00",
            orgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
            shortName: "GitLab",
         },
         references: [
            {
               url: "https://www.wireshark.org/security/wnpa-sec-2021-09.html",
            },
            {
               url: "https://gitlab.com/wireshark/wireshark/-/issues/17635",
            },
            {
               url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39925.json",
            },
            {
               name: "FEDORA-2021-97bd631e0a",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
            },
            {
               name: "FEDORA-2021-3747cf6107",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
            },
            {
               name: "DSA-5019",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2021/dsa-5019",
            },
            {
               name: "[debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
            },
            {
               name: "GLSA-202210-04",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/202210-04",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
      assignerShortName: "GitLab",
      cveId: "CVE-2021-39925",
      datePublished: "2021-11-19T00:00:00",
      dateReserved: "2021-08-23T00:00:00",
      dateUpdated: "2024-08-04T02:20:34.143Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-39928

Vulnerability from cvelistv5

Published

2021-11-18 00:00

Modified

2024-08-04 02:20

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2021-13.html
	https://gitlab.com/wireshark/wireshark/-/issues/17704
	https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39928.json
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/	vendor-advisory
	https://www.debian.org/security/2021/dsa-5019	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html	mailing-list
	https://security.gentoo.org/glsa/202210-04	vendor-advisory

Impacted products

	Vendor	Product	Version
	Wireshark Foundation	Wireshark	Version: >=3.4.0, <3.4.10 Version: >=3.2.0, <3.2.18

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T02:20:34.034Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2021-13.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/wireshark/wireshark/-/issues/17704",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39928.json",
               },
               {
                  name: "FEDORA-2021-97bd631e0a",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
               },
               {
                  name: "FEDORA-2021-3747cf6107",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
               },
               {
                  name: "DSA-5019",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-5019",
               },
               {
                  name: "[debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
               },
               {
                  name: "GLSA-202210-04",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202210-04",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Wireshark",
               vendor: "Wireshark Foundation",
               versions: [
                  {
                     status: "affected",
                     version: ">=3.4.0, <3.4.10",
                  },
                  {
                     status: "affected",
                     version: ">=3.2.0, <3.2.18",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Null pointer dereference in Wireshark",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-16T00:00:00",
            orgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
            shortName: "GitLab",
         },
         references: [
            {
               url: "https://www.wireshark.org/security/wnpa-sec-2021-13.html",
            },
            {
               url: "https://gitlab.com/wireshark/wireshark/-/issues/17704",
            },
            {
               url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39928.json",
            },
            {
               name: "FEDORA-2021-97bd631e0a",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
            },
            {
               name: "FEDORA-2021-3747cf6107",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
            },
            {
               name: "DSA-5019",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2021/dsa-5019",
            },
            {
               name: "[debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
            },
            {
               name: "GLSA-202210-04",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/202210-04",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
      assignerShortName: "GitLab",
      cveId: "CVE-2021-39928",
      datePublished: "2021-11-18T00:00:00",
      dateReserved: "2021-08-23T00:00:00",
      dateUpdated: "2024-08-04T02:20:34.034Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-39929

Vulnerability from cvelistv5

Published

2021-11-19 00:00

Modified

2024-08-04 02:20

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

References

▼	URL	Tags
	https://www.wireshark.org/security/wnpa-sec-2021-07.html
	https://gitlab.com/wireshark/wireshark/-/issues/17651
	https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39929.json
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/	vendor-advisory
	https://www.debian.org/security/2021/dsa-5019	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html	mailing-list
	https://security.gentoo.org/glsa/202210-04	vendor-advisory

Impacted products

	Vendor	Product	Version
	Wireshark Foundation	Wireshark	Version: >=3.4.0, <3.4.10 Version: >=3.2.0, <3.2.18

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T02:20:34.245Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.wireshark.org/security/wnpa-sec-2021-07.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/wireshark/wireshark/-/issues/17651",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39929.json",
               },
               {
                  name: "FEDORA-2021-97bd631e0a",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
               },
               {
                  name: "FEDORA-2021-3747cf6107",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
               },
               {
                  name: "DSA-5019",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-5019",
               },
               {
                  name: "[debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
               },
               {
                  name: "GLSA-202210-04",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202210-04",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Wireshark",
               vendor: "Wireshark Foundation",
               versions: [
                  {
                     status: "affected",
                     version: ">=3.4.0, <3.4.10",
                  },
                  {
                     status: "affected",
                     version: ">=3.2.0, <3.2.18",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "The OSS-Fuzz project",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Uncontrolled recursion in Wireshark",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-16T00:00:00",
            orgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
            shortName: "GitLab",
         },
         references: [
            {
               url: "https://www.wireshark.org/security/wnpa-sec-2021-07.html",
            },
            {
               url: "https://gitlab.com/wireshark/wireshark/-/issues/17651",
            },
            {
               url: "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39929.json",
            },
            {
               name: "FEDORA-2021-97bd631e0a",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH/",
            },
            {
               name: "FEDORA-2021-3747cf6107",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/",
            },
            {
               name: "DSA-5019",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://www.debian.org/security/2021/dsa-5019",
            },
            {
               name: "[debian-lts-announce] 20211226 [SECURITY] [DLA 2849-1] wireshark security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
            },
            {
               name: "GLSA-202210-04",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://security.gentoo.org/glsa/202210-04",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
      assignerShortName: "GitLab",
      cveId: "CVE-2021-39929",
      datePublished: "2021-11-19T00:00:00",
      dateReserved: "2021-08-23T00:00:00",
      dateUpdated: "2024-08-04T02:20:34.245Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_opensuse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature