CVE-2022-4345

Published: Jan 12, 2023Modified: Nov 3, 2025

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file

Affected (2)

Products: Wireshark: Wireshark

Wireshark

1 product

Wireshark

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Wireshark Wireshark	From 3.6.0 to 3.6.10
Wireshark Wireshark	From 4.0.0 to 4.0.2

Related CWEs

CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (11)

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4345.json

Source: cve@gitlab.com

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html

Source: cve@gitlab.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDZMWIKH3L5JQZC6GSVOJ3N5UXNQPJGQ/

Source: cve@gitlab.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGWIW6K64PKC375YAONYXKIVT2FDEDV3/

Source: cve@gitlab.com

https://www.wireshark.org/security/wnpa-sec-2022-09.html

Source: cve@gitlab.com

Vendor Advisory

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4345.json