PT-2023-14203 · Wireshark+2 · Wireshark+2

Sharon Brizinov · Publicado 2023-01-05 · Atualizado 2025-09-29 · CVE-2022-4344

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.9 Wireshark versions 4.0.0 through 4.0.1

Description Memory exhaustion in the Kafka protocol dissector allows denial of service via packet injection or crafted capture file.

Recommendations For Wireshark versions 3.6.0 through 3.6.9, update to a version that fixes the memory exhaustion issue in the Kafka protocol dissector. For Wireshark versions 4.0.0 through 4.0.1, update to a version that fixes the memory exhaustion issue in the Kafka protocol dissector. As a temporary workaround, consider disabling the Kafka protocol dissector until a patch is available.

Exploit

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

ALSA-2025_16880

ALT-PU-2023-1009

ALT-PU-2023-1036

ALT-PU-2023-1062

ALT-PU-2023-5823

AZL-12994

CVE-2022-4344

DLA-3906-1

OESA-2023-1094

OESA-2023-1115

ROSA-SA-2023-2257

ROSA-SA-2023-2258

Produtos afetados

Alt Linux

Astra Linux

Wireshark

Referências · 31

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4344.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-0412 · Nota de Segurança
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1094 · Nota
• https://osv.dev/vulnerability/CVE-2022-4344 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-4344 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-4344 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-0415 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-4344 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2023-1115 · Aviso do Fabricante
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1115 · Nota
• https://osv.dev/vulnerability/AZL-12994 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2022-4344 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-4345 · Nota de Segurança