CVE Details for CVE: CVE-2022-4345
Summary
Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file
Timestamps
Last major update 20-01-2023 - 19:30
Published 12-01-2023 - 04:15
Last modified 20-01-2023 - 19:30
Vulnerable Configurations
  • cpe:2.3:a:wireshark:wireshark:4.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:4.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:4.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:4.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:3.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:3.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:3.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:3.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:3.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:3.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:3.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:3.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:3.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:3.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:3.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:3.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:3.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:3.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:3.6.7:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:3.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:wireshark:wireshark:3.6.8:*:*:*:*:*:*:*
    cpe:2.3:a:wireshark:wireshark:3.6.8:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
CVSS
Base
None
Impact
Exploitability
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
CVSS3
Base
6.5
Impact
3.6
Exploitability
2.8
Access
Attack ComplexityAttack vectorPrivileges RequiredScopeUser Interaction
LOW NETWORK NONE UNCHANGED REQUIRED
Impact
ConfidentialityIntegrityAvailability
NONE NONE HIGH
VIA4 references
cvss3-vector via4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H