PT-2023-14207 · Wireshark+3 · Wireshark+3

Sharon Brizinov · Publicado 2023-01-05 · Atualizado 2025-09-29 · CVE-2022-4345

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.9 Wireshark versions 4.0.0 through 4.0.1

Description Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark allow denial of service via packet injection or crafted capture file.

Recommendations For Wireshark versions 3.6.0 through 3.6.9, update to a version that fixes the infinite loop issue in the BPv6, OpenFlow, and Kafka protocol dissectors. For Wireshark versions 4.0.0 through 4.0.1, update to a version that fixes the infinite loop issue in the BPv6, OpenFlow, and Kafka protocol dissectors.

Exploit

Correção

DoS

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

ALSA-2025_16880

ALT-PU-2023-1009

ALT-PU-2023-1036

ALT-PU-2023-1062

ALT-PU-2023-5823

CVE-2022-4345

DLA-3313-1

DLA-3906-1

OESA-2023-1094

OESA-2023-1115

OPENSUSE-SU-2023_0343-1

OPENSUSE-SU-2024:12647-1

ROSA-SA-2023-2257

SUSE-SU-2023:0343-1

SUSE-SU-2023_0343-1

Produtos afetados

Alt Linux

Astra Linux

Suse

Wireshark

Referências · 50

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4345.json · Exploit
• https://suse.com/security/cve/CVE-2023-0417 · Nota
• https://osv.dev/vulnerability/DLA-3906-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-4344 · Nota de Segurança
• https://osv.dev/vulnerability/OESA-2023-1094 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2023/suse-su-20230343-1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-4345 · Nota de Segurança
• https://osv.dev/vulnerability/DLA-3313-1 · Aviso do Fabricante
• https://t.me/cvenotify/43951 · Publicação no Telegram
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3 · Aviso do Fabricante
• https://bugzilla.suse.com/1207668 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-4345 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-0416 · Nota
• https://bugzilla.suse.com/1207665 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-3724 · Nota de Segurança