Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-4345

Fixed in a distro release EPSS <1%CVSS 6.3

Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file

Published 2023-01-12 · CVE record · OSV

Products: Wireshark Foundation Wireshark

Distro releases

ReleasePackageFixed in
Debian:10wireshark2.6.20-0+deb10u5
Debian:11wireshark3.4.16-0+deb11u1
Debian:12wireshark4.0.2-1
Debian:13wireshark4.0.2-1
Debian:14wireshark4.0.2-1
SUSE:Enterprise Storage 6wireshark3.6.11-150000.3.83.1
SUSE:Enterprise Storage 7wireshark3.6.11-150000.3.83.1
SUSE:Enterprise Storage 7.1wireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSwireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSwireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSwireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSwireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise Module for Basesystem 15 SP4wireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4wireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise Real Time 15 SP3wireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise Server 15 SP1-LTSSwireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise Server 15 SP2-LTSSwireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise Server 15 SP3-LTSSwireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP1wireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP2wireshark3.6.11-150000.3.83.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP3wireshark3.6.11-150000.3.83.1
SUSE:Manager Proxy 4.2wireshark3.6.11-150000.3.83.1
SUSE:Manager Retail Branch Server 4.2wireshark3.6.11-150000.3.83.1
SUSE:Manager Server 4.2wireshark3.6.11-150000.3.83.1
Ubuntu:Pro:20.04:LTSwiresharkno fix
Ubuntu:Pro:22.04:LTSwiresharkno fix
openSUSE:Leap 15.4wireshark3.6.11-150000.3.83.1
openSUSE:Tumbleweedwireshark4.0.3-2.1