VDB
GHSA-cqr2-f5xh-xf23
GHSA-cqr2-f5xh-xf23
PUBLISHED
CVSS 7.5 HIGH
Record from GitHub Advisory Database · Published May 24, 2022
Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
- May 24, 2022 CVE Published
- Apr 9, 2026 Security Advisory
- Apr 29, 2026 Distribution Patch
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-cqr2-f5xh-xf23
vulnetix vdb fixes GHSA-cqr2-f5xh-xf23Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-cqr2-f5xh-xf23/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-39925 advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39925.json url
- https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ url
- https://www.wireshark.org/security/wnpa-sec-2021-09.html url
- https://gitlab.com/wireshark/wireshark/-/issues/17635 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH url
- https://security.gentoo.org/glsa/202210-04 url
- https://www.debian.org/security/2021/dsa-5019 url