CVE-2022-4344

Published: Jan 12, 2023Modified: Nov 3, 2025

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file

Affected (2)

Products: Wireshark: Wireshark

Wireshark

1 product

Wireshark

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	From 3.0.0 to 3.6.10
Wireshark Wireshark	From 4.0.0 to 4.0.2

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (9)

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json

Source: cve@gitlab.com

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/

Source: cve@gitlab.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/

Source: cve@gitlab.com

https://www.wireshark.org/security/wnpa-sec-2022-10.html

Source: cve@gitlab.com

Vendor Advisory

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json