PT-2023-14203 · Wireshark+2 · Wireshark+2

Sharon Brizinov · Published 2023-01-05 · Updated 2025-09-29 · CVE-2022-4344

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.9 Wireshark versions 4.0.0 through 4.0.1

Description Memory exhaustion in the Kafka protocol dissector allows denial of service via packet injection or crafted capture file.

Recommendations For Wireshark versions 3.6.0 through 3.6.9, update to a version that fixes the memory exhaustion issue in the Kafka protocol dissector. For Wireshark versions 4.0.0 through 4.0.1, update to a version that fixes the memory exhaustion issue in the Kafka protocol dissector. As a temporary workaround, consider disabling the Kafka protocol dissector until a patch is available.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALSA-2025_16880

ALT-PU-2023-1009

ALT-PU-2023-1036

ALT-PU-2023-1062

ALT-PU-2023-5823

AZL-12994

CVE-2022-4344

DLA-3906-1

OESA-2023-1094

OESA-2023-1115

ROSA-SA-2023-2257

ROSA-SA-2023-2258

Affected Products

Alt Linux

Astra Linux

Wireshark

References · 31

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4344.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-0412 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4344 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-4344 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4344 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-0415 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-4344 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1115 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-12994 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4344 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4345 · Security Note
• https://osv.dev/vulnerability/OESA-2023-1094 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3906-1 · Vendor Advisory