CVE-2021-39924

CVE-2021-39924 describes a denial-of-service vulnerability in Wireshark versions 3.4.0 through 3.4.9 and 3.2.0 through 3.2.17, specifically within the Bluetooth DHT dissector. This flaw is triggered by a large loop that can be exploited via packet injection or a crafted capture file, affecting various distributions of Wireshark on Debian and Fedora. The vulnerability carries a CVSS v3.1 score of 7.5 (High), indicating a network-based attack vector with low attack complexity and no user interaction required, leading to a high impact on availability. While confidentiality and integrity are not directly affected, the ability to cause a denial of service is significant. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or attention.