VDB
GHSA-v5f8-gc5j-r8rv
GHSA-v5f8-gc5j-r8rv
PUBLISHED
CVSS 7.5 HIGH
Record from GitHub Advisory Database · Published November 19, 2021
NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
- Nov 19, 2021 CVE Published
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Security Advisory (3 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-v5f8-gc5j-r8rv
vulnetix vdb fixes GHSA-v5f8-gc5j-r8rvOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-v5f8-gc5j-r8rv/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-39920 advisory
- https://gitlab.com/wireshark/wireshark/-/issues/17705 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YEWTIRMC2MFQBZ2O5M4CJHJM4JPBHLXH url
- https://security.gentoo.org/glsa/202210-04 advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39920.json url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ url
- https://www.wireshark.org/security/wnpa-sec-2021-15.html url
- https://www.debian.org/security/2021/dsa-5019 advisory