CVEvulnerability
CVE-2022-3190
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-09-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-835
Description
Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file
Affected configurations
• wireshark wireshark (>= 3.4.0 < 3.4.16)
• wireshark wireshark (>= 3.6.0 < 3.6.8)
• fedoraproject fedora 36
• fedoraproject fedora 37
Related
Weakness · CWE (1)
- CWE-835 Loop with Unreachable Exit Condition weakness
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3190.json Third Party Advisory, VDB Entry
- https://gitlab.com/wireshark/wireshark/-/issues/18307 Exploit, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CH4NUKZKPY4MFQHFBTONJK2AWES4DFDA/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YR5LIOF5VKS4DC2NQWXTMPPXOYJC46XC/ lists.fedoraproject.org
- https://www.wireshark.org/security/wnpa-sec-2022-06.html Exploit, Issue Tracking, Third Party Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3190.json Third Party Advisory, VDB Entry
- https://gitlab.com/wireshark/wireshark/-/issues/18307 Exploit, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CH4NUKZKPY4MFQHFBTONJK2AWES4DFDA/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YR5LIOF5VKS4DC2NQWXTMPPXOYJC46XC/ lists.fedoraproject.org
- https://www.wireshark.org/security/wnpa-sec-2022-06.html Exploit, Issue Tracking, Third Party Advisory