CVEvulnerability
CVE-2022-4344
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-01-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
- Weaknesses
- CWE-400
Description
Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file
Affected configurations
• wireshark wireshark (>= 3.0.0 < 3.6.10)
• wireshark wireshark (>= 4.0.0 < 4.0.2)
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/ lists.fedoraproject.org
- https://www.wireshark.org/security/wnpa-sec-2022-10.html Vendor Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/ lists.fedoraproject.org
- https://www.wireshark.org/security/wnpa-sec-2022-10.html Vendor Advisory