CVE-2022-0581medium

CVE-2022-0581

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 1.8%

probabilidade de exploração

1.8%top 23% das CVEs

exploração observada

nãonenhuma fonte reporta

Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Produtos afetados

Wireshark Foundation · Wireshark

Referências

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0581.json https://gitlab.com/wireshark/wireshark/-/issues/17935 https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html https://lists.debian.org/debian-lts-announce/2024/09/msg00049.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/https://security.gentoo.org/glsa/202210-04 https://www.wireshark.org/security/wnpa-sec-2022-05.html