Lucene search

K
kasperskyKaspersky LabKLA19252
HistorySep 07, 2022 - 12:00 a.m.

KLA19252 DoS vulnerability in Wireshark

2022-09-0700:00:00
Kaspersky Lab
threats.kaspersky.com
83
wireshark
dos
vulnerability
update
latest version
f5 ethernet trailer dissector
cve-2022-3190
denial of service

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

38.0%

Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service.

Original advisories

F5 Ethernet Trailer dissector infinite loop

Related products

Wireshark

CVE list

CVE-2022-3190 high

Solution

Update to the latest version

Download Wireshark

Impacts

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • Wireshark 3.6.x earlier than 3.6.8Wireshark 3.4.x earlier than 3.4.16

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

38.0%