CVEvulnerability
CVE-2022-0582
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-02-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-476
Description
Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
Affected configurations
• wireshark wireshark (>= 3.4.0 < 3.4.12)
• wireshark wireshark 3.6.0
• wireshark wireshark 3.6.1
• fedoraproject fedora 34
• fedoraproject fedora 35
• debian debian linux 9.0
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0582.json Third Party Advisory
- https://gitlab.com/wireshark/wireshark/-/issues/17882 Exploit, Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202210-04 Third Party Advisory
- https://www.wireshark.org/security/wnpa-sec-2022-04.html Issue Tracking, Vendor Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0582.json Third Party Advisory
- https://gitlab.com/wireshark/wireshark/-/issues/17882 Exploit, Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202210-04 Third Party Advisory
- https://www.wireshark.org/security/wnpa-sec-2022-04.html Issue Tracking, Vendor Advisory