CVE-2021-39928

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.2.0 through 3.2.17 Wireshark versions 3.4.0 through 3.4.9

Description The issue is related to a NULL pointer exception in the IEEE 802.11 dissector, which can be exploited to cause a denial of service via packet injection or crafted capture files. This can be achieved by a remote attacker, allowing them to disrupt the service.

Recommendations For Wireshark versions 3.2.0 through 3.2.17, update to a version outside of this range to resolve the issue. For Wireshark versions 3.4.0 through 3.4.9, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting the use of the IEEE 802.11 dissector in Wireshark until a patch is available.