Paper/Archive/CVE-2022-0582

CVE-2022-0582

Wireshark Foundation Wireshark — Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet inje…

EPSS 2%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 80.7.807 × 2016.1 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

Affected

ProductAffectedFixed inSource

Wireshark>=3.6.0, <3.6.2–CNA

Wireshark>=3.4.0, <3.4.12–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

GitLab (CNA)6.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

References

refwireshark.org/security/wnpa-sec-2022-04.html refgitlab.com/wireshark/wireshark/-/issues/17882 refgitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0582.json advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T reflists.debian.org/debian-lts-announce/2022/03/msg00041.html advisorysecurity.gentoo.org/glsa/202210-04 reflists.debian.org/debian-lts-announce/2024/09/msg00049.html