CVEvulnerability
CVE-2022-4345
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-01-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-835
Description
Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file
Affected configurations
• wireshark wireshark (>= 3.6.0 < 3.6.10)
• wireshark wireshark (>= 4.0.0 < 4.0.2)
Related
Weakness · CWE (1)
- CWE-835 Loop with Unreachable Exit Condition weakness
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4345.json Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/ lists.fedoraproject.org
- https://www.wireshark.org/security/wnpa-sec-2022-09.html Vendor Advisory
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4345.json Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html lists.debian.org
- https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/ lists.fedoraproject.org
- https://www.wireshark.org/security/wnpa-sec-2022-09.html Vendor Advisory