Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-11203
HistoryNov 22, 2021 - 12:00 a.m.

Wireshark Input Validation Error Vulnerability (CNVD-2022-11203)

2021-11-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

Wireshark (formerly Ethereal) is a set of network packet analysis software from the Wireshark team. The software’s function is to intercept network packets and display detailed data for analysis.Wireshark is vulnerable to an input validation error, which exists due to insufficient validation in the IEEE 802.11 profiler. A remote attacker could exploit the vulnerability to be able to send specially crafted packets through the application and perform a denial of service (DoS) attack.

CPENameOperatorVersion
Wireshark Wireshark >=3.4.0,le3.4.9

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P