CVE-2022-3190

Published: Sep 13, 2022Modified: Nov 3, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file

Affected (4)

Products: Wireshark: Wireshark · Fedoraproject: Fedora

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	From 3.4.0 to 3.4.16
Wireshark Wireshark	From 3.6.0 to 3.6.8

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 36
Fedoraproject Fedora	Version 37

Related CWEs

CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (11)

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3190.json

Source: cve@gitlab.com

Third Party AdvisoryVDB Entry

https://gitlab.com/wireshark/wireshark/-/issues/18307

Source: cve@gitlab.com

ExploitThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CH4NUKZKPY4MFQHFBTONJK2AWES4DFDA/

Source: cve@gitlab.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YR5LIOF5VKS4DC2NQWXTMPPXOYJC46XC/

Source: cve@gitlab.com

https://www.wireshark.org/security/wnpa-sec-2022-06.html

Source: cve@gitlab.com

ExploitIssue TrackingThird Party Advisory

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3190.json