CVE-2022-3190

Exploit

EPSS 0.02%
Veröffentlicht 13.09.2022 15:15:09
Zuletzt bearbeitet 03.11.2025 22:15:59
Quelle cve@gitlab.com
CVE-Watchlists
Login
Unerledigt
Login

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Wireshark ≫ Wireshark Version >= 3.4.0 < 3.4.16

Wireshark ≫ Wireshark Version >= 3.6.0 < 3.6.8

Fedoraproject ≫ Fedora Version36

Fedoraproject ≫ Fedora Version37

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.02%	0.025

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
cve@gitlab.com	6.3	2.8	3.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3190.json

Third Party Advisory

VDB Entry

https://gitlab.com/wireshark/wireshark/-/issues/18307

Third Party Advisory

Exploit

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CH4NUKZKPY4MFQHFBTONJK2AWES4DFDA/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YR5LIOF5VKS4DC2NQWXTMPPXOYJC46XC/

https://www.wireshark.org/security/wnpa-sec-2022-06.html

Third Party Advisory

Exploit

Issue Tracking

https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html

https://nvd.nist.gov/vuln/detail/CVE-2022-3190

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-3190

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-3190

EUVD