CVE-2022-3724

🗓️ 09 Dec 2022 00:00:00Reported by GitLabType

Crash in USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Window

Reporter	Title	Published	Views	Family All 19
Circl	CVE-2022-3724	9 Dec 202220:18	–	circl
CNNVD	Wireshark 格式化字符串错误漏洞	9 Dec 202200:00	–	cnnvd
CNVD	Unspecified Vulnerability in Wireshark (CNVD-2024-39277)	13 Dec 202200:00	–	cnvd
CVE	CVE-2022-3724	9 Dec 202200:00	–	cve
Debian CVE	CVE-2022-3724	9 Dec 202200:00	–	debiancve
EUVD	EUVD-2022-43080	3 Oct 202520:07	–	euvd
NVD	CVE-2022-3724	9 Dec 202218:15	–	nvd
OSV	CVE-2022-3724	9 Dec 202200:00	–	osv
OSV	OESA-2023-1094 wireshark security update	17 Feb 202311:04	–	osv
OSV	OESA-2023-1115 wireshark security update	24 Feb 202311:04	–	osv

[
  {
    "vendor": "Wireshark Foundation",
    "product": "Wireshark",
    "versions": [
      {
        "version": ">=3.6.0, <3.6.8",
        "status": "affected"
      }
    ]
  }
]

Source	Link
wireshark	www.wireshark.org/security/wnpa-sec-2022-08.html
gitlab	www.gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3724.json
gitlab	www.gitlab.com/wireshark/wireshark/-/issues/18384

09 Dec 2022 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.16.3

EPSS0.00376