CVE-2022-3724

Summary

Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows

Affected Software

Weaknesses

• Use of externally-controlled format string in Wireshark

ADP Enrichment

CVE Program Container

Additional References

• https://www.wireshark.org/security/wnpa-sec-2022-08.html
• https://gitlab.com/wireshark/wireshark/-/issues/18384
• https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3724.json

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.wireshark.org/security/wnpa-sec-2022-08.html
• https://gitlab.com/wireshark/wireshark/-/issues/18384
• https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3724.json

• ←Previous
• Next→