PT-2022-20979 · Wireshark+7 · Wireshark+7

Gerald Combs + 1 · Published 2022-09-13 · Updated 2025-09-29 · CVE-2022-3190

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.4.0 through 3.4.15 Wireshark versions 3.6.0 through 3.6.7

Description The issue is related to an infinite loop in the F5 Ethernet Trailer protocol dissector, which allows for denial of service via packet injection or crafted capture file.

Recommendations For Wireshark versions 3.4.0 through 3.4.15, update to a version that contains a fix for this issue. For Wireshark versions 3.6.0 through 3.6.7, update to a version that contains a fix for this issue. As a temporary workaround, consider disabling the F5 Ethernet Trailer protocol dissector until a patch is available.

Exploit

Fix

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

ALSA-2023:2373

ALSA-2023_2373

ALSA-2025_16880

ALT-PU-2022-2739

ALT-PU-2022-2833

ALT-PU-2023-1062

ALT-PU-2023-5823

AZL-10920

CVE-2022-3190

DLA-3906-1

OESA-2022-1992

OPENSUSE-SU-2022_3309-1

OPENSUSE-SU-2024:12329-1

RHSA-2023:2373

RHSA-2023_2373

SUSE-SU-2022:3309-1

USN-7552-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Linuxmint

Red Hat

Suse

Ubuntu

Wireshark

References · 44

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3190.json · Exploit
• 🔥 https://wireshark.org/security/wnpa-sec-2022-06.html · Exploit
• 🔥 https://gitlab.com/wireshark/wireshark/-/issues/18307 · Exploit
• https://osv.dev/vulnerability/AZL-10920 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0585 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7552-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0581 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3309-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0586 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3190 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-3190 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:2373 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2373.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-7552-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4185 · Vendor Advisory