Bug 2160659 (CVE-2022-4345)

Summary:	CVE-2022-4345 wireshark: multiple (BPv6, OpenFlow, and Kafka protocol) dissector infinite loops
Product:	[Other] Security Response	Reporter:	TEJ RATHI <trathi>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	mruprich
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	wireshark 4.0.2, wireshark 3.6.10	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-01-20 10:22:29 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2161136
Bug Blocks:	2160444

Description TEJ RATHI 2023-01-13 07:58:53 UTC

Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4345.json
https://www.wireshark.org/security/wnpa-sec-2022-09.html

Comment 1 Sandipan Roy 2023-01-16 05:12:32 UTC

Created wireshark tracking bugs for this issue:

Affects: fedora-all [bug 2161136]

Comment 2 Product Security DevOps Team 2023-01-20 10:22:28 UTC

This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2022-4345