Lucene search

GitLabCVE-2022-3724

HistoryDec 09, 2022 - 6:15 p.m.

CVE-2022-3724

2022-12-0918:15:19

CWE-134

GitLab

web.nvd.nist.gov

cve-2022-3724

wireshark

usb hid

protocol dissector

denial of service

dos

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

44.9%

JSON

Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows

Affected configurations

Nvd

Vulners

Node

microsoftwindowsMatch-

AND

wiresharkwiresharkRange3.6.0–3.6.8

VendorProductVersionCPE
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
wiresharkwireshark*cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*
wireshark	wireshark	*	cpe:2.3:a:wireshark:wireshark::::::::

CNA Affected

[
  {
    "vendor": "Wireshark Foundation",
    "product": "Wireshark",
    "versions": [
      {
        "version": ">=3.6.0, <3.6.8",
        "status": "affected"
      }
    ]
  }
]

References

gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3724.json

gitlab.com/wireshark/wireshark/-/issues/18384

www.wireshark.org/security/wnpa-sec-2022-08.html

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

44.9%

JSON

Related for CVE-2022-3724