7.5
High
CVE-2021-39920 NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection…
Description
NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wireshark 3.4 | 3.4.0 → < 3.4.10 | 3.4.10 |
References
- www.wireshark.org www.wireshark.org
- gitlab.com gitlab.com
- gitlab.com gitlab.com
- FEDORA-2021-97bd631e0a lists.fedoraproject.org
- FEDORA-2021-3747cf6107 lists.fedoraproject.org
- DSA-5019 www.debian.org
- GLSA-202210-04 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of Wireshark
The 185 CVEs of Wireshark →
CVE-2026-95391
ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium
CVE-2026-95389
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
8.1
High
CVE-2026-95386
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium
CVE-2026-95390
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service
5.5
Medium