CVE-2022-4344 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 43%

Affected Products (NVD)

Vendor	Product	Version
wireshark	wireshark	3.0.0 ≤ 𝑥 < 3.6.10
wireshark	wireshark	4.0.0 ≤ 𝑥 < 4.0.2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

wireshark

bookworm	4.0.11-1~deb12u1 fixed
bookworm (security)	4.0.11-1~deb12u1 fixed
bullseye	vulnerable
bullseye (security)	3.4.16-0+deb11u1 fixed
buster	not-affected
sid	4.4.1-1 fixed
trixie	4.4.0-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

wireshark

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
kinetic	ignored
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	needs-triage
xenial	needs-triage

Amazon Linux Releases

Amazon Package

Release

wireshark-cli

Amazon Linux 2023

1:4.0.3-1.amzn2023.0.1

fixed

wireshark-cli-debuginfo

Amazon Linux 2023

1:4.0.3-1.amzn2023.0.1

fixed

wireshark-debugsource

Amazon Linux 2023

1:4.0.3-1.amzn2023.0.1

fixed

wireshark-devel

Amazon Linux 2023

1:4.0.3-1.amzn2023.0.1

fixed

Azure Linux Releases

Azure Package

Release

wireshark

CBL-Mariner 2.0

0:4.0.8-1.cm2

fixed

Common Weakness Enumeration

CWE-400 - Uncontrolled Resource Consumption
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/

https://www.wireshark.org/security/wnpa-sec-2022-10.html

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json

https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/

https://www.wireshark.org/security/wnpa-sec-2022-10.html