CVE-2022-4344
First published: Wed Jan 11 2023(Updated: )
Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file
Credit: cve@gitlab.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wireshark Wireshark | >=3.0.0<3.6.10 | |
| Wireshark Wireshark | >=4.0.0<4.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/
- https://www.wireshark.org/security/wnpa-sec-2022-10.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/
Frequently Asked Questions
What is CVE-2022-4344?
CVE-2022-4344 is a vulnerability that allows memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9, leading to denial of service through packet injection or crafted capture file.
What is the severity of CVE-2022-4344?
The severity of CVE-2022-4344 is medium, with a severity value of 4.3.
Which software versions are affected by CVE-2022-4344?
CVE-2022-4344 affects Wireshark versions 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9.
How can I fix CVE-2022-4344?
To fix CVE-2022-4344, it is recommended to update to a version of Wireshark that is not affected, such as version 4.0.2 or higher for Wireshark 4.x and version 3.6.10 or higher for Wireshark 3.6.x.
Where can I find more information about CVE-2022-4344?
You can find more information about CVE-2022-4344 at the following references: [Reference 1](https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json), [Reference 2](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/), [Reference 3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/)
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/type
- agent/description
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/wireshark
- canonical/wireshark wireshark
- version/wireshark wireshark/3.0.0
- version/wireshark wireshark/4.0.0