CVE-2021-39929
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3...
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- Record
CVE-2021-39929- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
EUVDEUVD-2021-26285
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- Record
EUVD-2021-26285- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jcx2-5qw3-59p6
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3...
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- Record
GHSA-jcx2-5qw3-59p6- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-674
- Updated
- 2026-11-02
NVD
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- Record
CVE-2021-39929- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-674
- Updated
- 2026-11-02
OSVALPINE-CVE-2021-39929
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- Record
ALPINE-CVE-2021-39929- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVAZL-7416
CVE-2021-39929 affecting package wireshark for versions less than 3.4.14-1
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- Record
AZL-7416- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 9 moreShow less
OSV
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- Record
CVE-2021-39929- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-39929
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- Record
DEBIAN-CVE-2021-39929- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-39929
Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
- Record
UBUNTU-CVE-2021-39929- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2021-0518 No score
Updated wireshark packages fix security vulnerability
IPPUSB dissector crash (CVE-2021-39920). Modbus dissector crash (CVE-2021-39921). C12.22 dissector crash (CVE-2021-39922). PNRP dissector large loop (wnpa-sec-2021-11). Bluetooth DHT dissector large loop (CVE-2021-39924). Bluetooth SDP dissector crash (CVE-2021-39925). Bluetooth HCI_ISO dissector crash (CVE-2021-39926). IEEE 802.11 dissector crash (CVE-2021-39928). Bluetooth DHT dissector crash (CVE-2021-39929).
- Record
MGASA-2021-0518- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:1566-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
- Update to Wireshark 3.4.10:
- CVE-2021-39920: IPPUSB dissector crash (bsc#1192830).
- CVE-2021-39921: Modbus dissector crash (bsc#1192830).
- CVE-2021-39922: C12.22 dissector crash (bsc#1192830).
- CVE-2021-39924: Bluetooth DHT dissector large loop (bsc#1192830).
- CVE-2021-39925: Bluetooth SDP dissector crash (bsc#1192830).
- CVE-2021-39926: Bluetooth HCI_ISO dissector crash (bsc#1192830).
- CVE-2021-39928: IEEE 802.11 dissector crash (bsc#1192830).
- CVE-2021-39929: Bluetooth DHT dissector crash (bsc#1192830).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2021:1566-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:3938-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
- Update to Wireshark 3.4.10:
- CVE-2021-39920: IPPUSB dissector crash (bsc#1192830).
- CVE-2021-39921: Modbus dissector crash (bsc#1192830).
- CVE-2021-39922: C12.22 dissector crash (bsc#1192830).
- CVE-2021-39924: Bluetooth DHT dissector large loop (bsc#1192830).
- CVE-2021-39925: Bluetooth SDP dissector crash (bsc#1192830).
- CVE-2021-39926: Bluetooth HCI_ISO dissector crash (bsc#1192830).
- CVE-2021-39928: IEEE 802.11 dissector crash (bsc#1192830).
- CVE-2021-39929: Bluetooth DHT dissector crash (bsc#1192830).
- Record
openSUSE-SU-2021:3938-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11641-1 No score
libwireshark14-3.4.10-1.1 on GA media
These are all security issues fixed in the libwireshark14-3.4.10-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11641-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:3938-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
- Update to Wireshark 3.4.10:
- CVE-2021-39920: IPPUSB dissector crash (bsc#1192830).
- CVE-2021-39921: Modbus dissector crash (bsc#1192830).
- CVE-2021-39922: C12.22 dissector crash (bsc#1192830).
- CVE-2021-39924: Bluetooth DHT dissector large loop (bsc#1192830).
- CVE-2021-39925: Bluetooth SDP dissector crash (bsc#1192830).
- CVE-2021-39926: Bluetooth HCI_ISO dissector crash (bsc#1192830).
- CVE-2021-39928: IEEE 802.11 dissector crash (bsc#1192830).
- CVE-2021-39929: Bluetooth DHT dissector crash (bsc#1192830).
- Record
SUSE-SU-2021:3938-1- Updated
- 2026-11-02
OSVUSN-7552-1 No score
wireshark vulnerabilities
It was discovered that Wireshark did not correctly handle recursion. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-39929)
Roman Donchenko discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-4182)
It was discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-4185, CVE-2022-0581)
It was discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-4186)
Sharon Brizinov discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-0582, CVE-2022-0583, CVE-2022-0586)
Sharon Brizinov discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2022-0585)
Jason Cohen discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-3190)
- Record
USN-7552-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.15 |
3.2.0 up to 3.4.13-r0 | 3.4.13-r0 |
wiresharkAlpine:v3.16 |
3.2.0 up to 3.4.11-r0 | 3.4.11-r0 |
wiresharkAlpine:v3.17 |
3.2.0 up to 3.4.11-r0 | 3.4.11-r0 |
wiresharkAlpine:v3.18 |
3.2.0 up to 3.4.11-r0 | 3.4.11-r0 |
wiresharkAlpine:v3.19 |
3.2.0 up to 3.4.11-r0 | 3.4.11-r0 |
wiresharkAlpine:v3.20 |
3.2.0 up to 3.4.11-r0 | 3.4.11-r0 |
wiresharkAlpine:v3.21 |
3.2.0 up to 3.4.11-r0 | 3.4.11-r0 |
wiresharkAlpine:v3.22 |
3.2.0 up to 3.4.11-r0 | 3.4.11-r0 |
wiresharkAlpine:v3.23 |
3.2.0 up to 3.4.11-r0 | 3.4.11-r0 |
wiresharkAlpine:v3.24 |
3.2.0 up to 3.4.11-r0 | 3.4.11-r0 |
Show 23 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkAzure Linux:2 |
before 3.4.14-1 | 3.4.14-1 |
wiresharkDebian:12 |
before 3.6.0-1 | 3.6.0-1 |
wiresharkDebian:13 |
before 3.6.0-1 | 3.6.0-1 |
wiresharkDebian:14 |
before 3.6.0-1 | 3.6.0-1 |
wiresharkDebian:9 From an advisory covering 9 CVEs |
before 2.6.20-0+deb9u2, plus listed versions 2.2.6+g32dac6a-22.2.6+g32dac6a-2+deb9u12.2.6+g32dac6a-2+deb9u22.2.6+g32dac6a-2+deb9u32.2.7-1 Show 25 moreShow less2.4.0-12.4.1-12.4.2-12.4.3-12.4.4-12.4.5-12.4.6-12.6.1-12.6.10-12.6.2-12.6.2-22.6.20-0+deb9u12.6.3-12.6.3-1~deb9u12.6.4-12.6.4-22.6.5-12.6.5-1~deb9u12.6.6-12.6.7-12.6.7-1~deb9u12.6.8-12.6.8-1.12.6.8-1.1~deb9u12.6.9-1 |
2.6.20-0+deb9u2 |
wiresharkDebian:11 From an advisory covering 12 CVEs |
before 3.4.10-0+deb11u1, plus listed versions 3.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1 |
3.4.10-0+deb11u1 |
wiresharkMageia:8 From an advisory covering 8 CVEs |
before 3.4.10-1.mga8 | 3.4.10-1.mga8 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 8 CVEs |
before 3.4.10-3.62.1 | 3.4.10-3.62.1 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 8 CVEs |
before 3.4.10-3.62.1 | 3.4.10-3.62.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP2 From an advisory covering 8 CVEs |
before 3.4.10-3.62.1 | 3.4.10-3.62.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 8 CVEs |
before 3.4.10-3.62.1 | 3.4.10-3.62.1 |
wiresharkUbuntu:Pro:14.04:LTS |
before 2.6.10-1~ubuntu14.04.0~esm3, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 8 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm2 |
2.6.10-1~ubuntu14.04.0~esm3 |
wiresharkUbuntu:Pro:16.04:LTS |
before 2.6.10-1~ubuntu16.04.0+esm2, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 7 moreShow less2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm1 |
2.6.10-1~ubuntu16.04.0+esm2 |
wiresharkUbuntu:Pro:18.04:LTS |
before 2.6.10-1~ubuntu18.04.0+esm2, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 6 moreShow less2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm1 |
2.6.10-1~ubuntu18.04.0+esm2 |
wiresharkUbuntu:Pro:20.04:LTS |
before 3.2.3-1ubuntu0.1~esm2, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm1 |
3.2.3-1ubuntu0.1~esm2 |
wiresharkUbuntu:Pro:14.04:LTS From an advisory covering 10 CVEs |
before 2.6.10-1~ubuntu14.04.0~esm3, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 8 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm2 |
2.6.10-1~ubuntu14.04.0~esm3 |
wiresharkUbuntu:Pro:16.04:LTS From an advisory covering 10 CVEs |
before 2.6.10-1~ubuntu16.04.0+esm2, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 7 moreShow less2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm1 |
2.6.10-1~ubuntu16.04.0+esm2 |
wiresharkUbuntu:Pro:18.04:LTS From an advisory covering 10 CVEs |
before 2.6.10-1~ubuntu18.04.0+esm2, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 6 moreShow less2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm1 |
2.6.10-1~ubuntu18.04.0+esm2 |
wiresharkUbuntu:Pro:20.04:LTS From an advisory covering 10 CVEs |
before 3.2.3-1ubuntu0.1~esm2, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm1 |
3.2.3-1ubuntu0.1~esm2 |
wiresharkUbuntu:Pro:22.04:LTS From an advisory covering 10 CVEs |
before 3.6.2-2ubuntu0.1~esm1, plus listed versions 3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-2 |
3.6.2-2ubuntu0.1~esm1 |
wiresharkopenSUSE:Leap 15.2 From an advisory covering 8 CVEs |
before 3.4.10-lp152.2.21.1 | 3.4.10-lp152.2.21.1 |
wiresharkopenSUSE:Leap 15.3 From an advisory covering 8 CVEs |
before 3.4.10-3.62.1 | 3.4.10-3.62.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 3.4.10-1.1 | 3.4.10-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-39929 is a high vulnerability (CVSS 7.5) in Wireshark, published November 19, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.81%, the 90th percentile. Fixed in wireshark 3.4.13-r0.
References
wireshark.org/security/wnpa-sec-2021-07.html
gitlab.com/wireshark/wireshark/-/issues/17651
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH
debian.org/security/2021/dsa-5019
Show 49 moreShow less
lists.debian.org/debian-lts-announce/2021/12/msg00015.html
security.gentoo.org/glsa/202210-04
nvd.nist.gov/vuln/detail/CVE-2021-39929
github.com/advisories/GHSA-jcx2-5qw3-59p6
security.alpinelinux.org/vuln/CVE-2021-39929
security-tracker.debian.org/tracker/CVE-2021-39929
advisories.mageia.org/MGASA-2021-0518.html
bugs.mageia.org/show_bug.cgi?id=29670
suse.com/support/update/announcement/2021/suse-su-20213938-1
bugzilla.suse.com/1192830
ubuntu.com/security/CVE-2021-39929
cve.org/CVERecord?id=CVE-2021-39929
lists.opensuse.org/archives/list/[email protected]/thread/R4IHVPZT7B7SN73CHLW4TIYSYZIPKJ7D