CVE-2022-3725: Buffer Overflow
Published Oct 27, 2022
·Updated
Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file
Affected Software
6 affected componentsFixes available
Wireshark Wireshark>=3.6.0<=3.6.8
Fedoraproject Fedora=37
debian/wireshark<4.0.0-1
4.0.0-1
debian/wireshark<4.0.0-1
4.0.0-1
debian/wireshark<4.0.0-1
4.0.0-1
debian/wireshark
4.0.17-0+deb12u34.4.18-0+deb13u14.4.19-0+deb13u14.6.9-1
Remediation
Patch Available
Event History
Oct 27, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·05:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2022-3725.
2
What is the severity of CVE-2022-3725?
The severity of CVE-2022-3725 is high.
3
Which software versions are affected by CVE-2022-3725?
Wireshark versions 3.6.0 to 3.6.8 and Fedora version 37 are affected by CVE-2022-3725.
4
How can this vulnerability be exploited?
This vulnerability can be exploited through packet injection or a crafted capture file.
5
Are there any references available for CVE-2022-3725?
Yes, here are some references for CVE-2022-3725: [Link1](https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3725.json), [Link2](https://gitlab.com/wireshark/wireshark/-/issues/18378), [Link3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIEIFFZ27YKCTK5C2VT4OEQSHPQDBNSF/).