KLA20164 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in BPv6, OpenFlow, and Kafka protocol dissectors can be exploited to cause denial of service.
2. Denial of service vulnerability in Kafka dissector can be exploited to cause denial of service.

Original advisories

Kafka dissector memory exhaustion.

Multiple dissector infinite loops

Related products

Wireshark

CVE list

CVE-2022-4345 high

CVE-2022-4344 warning

Solution

Update to the latest version

Download Wireshark

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Wireshark 3.6.x earlier than 3.6.10Wireshark 4.0.x earlier than 4.0.2