Wireshark Input Validation Error Vulnerability (CNVD-2022-11205)

2021-11-2200:00:00

China National Vulnerability Database

www.cnvd.org.cn

0.02 Low

EPSS

Percentile

89.0%

JSON

Wireshark (formerly known as Ethereal) is a set of network packet analysis software from the Wireshark team. The software’s function is to intercept network packets and display detailed data for analysis.Wireshark contains an input validation error vulnerability that could be exploited by remote attackers to send specially crafted packets through the application and perform a denial of service (DoS) attack.

CPENameOperatorVersion
wireshark wiresharkeq3.4.0
red hat wiresharkeq3.2.0
red hat wiresharkeq3.2.1
red hat wiresharkeq3.2.2
red hat wiresharkeq3.2.3
red hat wiresharkeq3.2.4
red hat wiresharkeq3.2.5
red hat wiresharkeq3.2.6
red hat wiresharkeq3.2.7
red hat wiresharkeq3.2.8

Name	Operator	Version
wireshark wireshark	eq	3.4.0
red hat wireshark	eq	3.2.0
red hat wireshark	eq	3.2.1
red hat wireshark	eq	3.2.2
red hat wireshark	eq	3.2.3
red hat wireshark	eq	3.2.4
red hat wireshark	eq	3.2.5
red hat wireshark	eq	3.2.6
red hat wireshark	eq	3.2.7
red hat wireshark	eq	3.2.8