PT-2022-13281 · Wireshark+5 · Wireshark+5

Sharon Brizinov · Published 2022-02-14 · Updated 2025-06-04 · CVE-2022-0586

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.4.0 through 3.4.11 Wireshark versions 3.6.0 through 3.6.1

Description The issue is related to an infinite loop in the RTMPT protocol dissector, which can be exploited to cause a denial of service. This can be achieved through packet injection or by using a crafted capture file.

Recommendations For Wireshark versions 3.4.0 through 3.4.11, update to a version that contains a fix for this issue. For Wireshark versions 3.6.0 through 3.6.1, update to a version that contains a fix for this issue. As a temporary workaround, consider disabling the RTMPT protocol dissector until a patch is available.

Exploit

Fix

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

ALT-PU-2022-1349

ALT-PU-2022-1368

ALT-PU-2022-1391

ALT-PU-2022-1599

AZL-8614

CVE-2022-0586

DLA-2967-1

DLA-3906-1

OESA-2022-2078

OPENSUSE-SU-2022:0722-1

OPENSUSE-SU-2022_0722-1

OPENSUSE-SU-2024:11858-1

SUSE-SU-2022:0722-1

USN-7552-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Suse

Ubuntu

Wireshark

References · 55

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0586.json · Exploit
• 🔥 https://gitlab.com/wireshark/wireshark/-/issues/17813 · Exploit
• https://security.gentoo.org/glsa/202210-04 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0581 · Security Note
• https://ubuntu.com/security/CVE-2022-0585 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2967-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7552-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0586 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0581 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0583 · Security Note
• https://ubuntu.com/security/CVE-2021-39929 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0722-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11858-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3190 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-8614 · Vendor Advisory