CVE-2021-39923

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.2.0 through 3.2.17 Wireshark versions 3.4.0 through 3.4.9

Description The issue is related to a large loop in the PNRP dissector and a NULL pointer exception in the IPPUSB dissector, allowing denial of service via packet injection or crafted capture file.

Recommendations For Wireshark versions 3.2.0 through 3.2.17, update to a version outside of this range to resolve the issue. For Wireshark versions 3.4.0 through 3.4.9, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling the PNRP and IPPUSB dissectors until a patch is available.