CVE-2022-4345

Details

Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file

Affected Packages

Windows:10240Wireshark

Fixed in:

3.6.104.0.2

Windows:14393Wireshark

Fixed in:

3.6.104.0.2

Windows:17763Wireshark

Fixed in:

3.6.104.0.2

Windows:18362Wireshark

Fixed in:

3.6.104.0.2

Windows:18363Wireshark

Fixed in:

3.6.104.0.2

Windows:19041Wireshark

Fixed in:

3.6.104.0.2

Windows:19042Wireshark

Fixed in:

3.6.104.0.2

Windows:19043Wireshark

Fixed in:

3.6.104.0.2

Windows:19044Wireshark

Fixed in:

3.6.104.0.2

Windows:19045Wireshark

Fixed in:

3.6.104.0.2

Windows:20348Wireshark

Fixed in:

3.6.104.0.2

Windows:22000Wireshark

Fixed in:

3.6.104.0.2

Windows:22621Wireshark

Fixed in:

3.6.104.0.2

Windows:22631Wireshark

Fixed in:

3.6.104.0.2

Windows:25398Wireshark

Fixed in:

3.6.104.0.2

Windows:26100Wireshark

Fixed in:

3.6.104.0.2

Windows:26200Wireshark

Fixed in:

3.6.104.0.2

References

WEBhttps://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4345.json WEBhttps://lists.debian.org/debian-lts-announce/2023/02/msg00007.html WEBhttps://lists.debian.org/debian-lts-announce/2024/09/msg00049.html ADVISORYhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/ADVISORYhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2022-4345 WEBhttps://www.wireshark.org/security/wnpa-sec-2022-09.html

CVE-2022-4345

Details

Affected Packages

References

CVSS Analysis

Ecosystems

Timeline