CVE-2021-39920

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.4.0 through 3.4.9

Description The issue is related to a NULL pointer exception in the IPPUSB dissector, which can be exploited to cause a denial of service via packet injection or crafted capture files. This can be achieved by a remote attacker, allowing them to disrupt the service. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Wireshark versions 3.4.0 through 3.4.9, consider disabling the IPPUSB dissector as a temporary workaround until a patch is available. Restrict access to crafted capture files and avoid using the affected dissector to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.