CVE-2022-0586
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows...
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- Record
CVE-2022-0586- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
EUVDEUVD-2022-15696
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- Record
EUVD-2022-15696- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-m236-5q24-77fq
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows...
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- Record
GHSA-m236-5q24-77fq- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
NVD
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- Record
CVE-2022-0586- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-835
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-0586
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- Record
ALPINE-CVE-2022-0586- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVAZL-8614
CVE-2022-0586 affecting package wireshark for versions less than 3.4.14-1
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- Record
AZL-8614- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 10 moreShow less
OSV
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- Record
CVE-2022-0586- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-0586
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- Record
DEBIAN-CVE-2022-0586- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVOESA-2022-2078
wireshark security update
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols.
Security Fix(es):
Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file(CVE-2022-0583)
Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file(CVE-2022-0585)
Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file(CVE-2022-0581)
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file(CVE-2022-0586)
Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file(CVE-2022-0582)
Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file(CVE-2022-3725)
- Record
OESA-2022-2078- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-0586
Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
- Record
UBUNTU-CVE-2022-0586- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1777306004 No score
wireshark: Fix of CVE-2022-0586
- CVE-2022-0586: fix infinite loop in RTMPT dissector rtmpt_get_amf_length
- Record
CLSA-2026-1777306004- Updated
- 2026-11-02
OSVCLSA-2026-1777369264 No score
wireshark: Fix of CVE-2022-0586
- CVE-2022-0586: fix infinite loop in RTMPT dissector rtmpt_get_amf_length
- Record
CLSA-2026-1777369264- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:0722-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
Update to Wireshark 3.6.2:
- CVE-2022-0586: RTMPT dissector infinite loop (bsc#1195866)
- CVE-2022-0585: Large loops in multiple dissectors (bsc#1195867)
- CVE-2022-0583: PVFS dissector crash (bsc#1195868)
- CVE-2022-0582: CSN.1 dissector crash (bsc#1195869)
- CVE-2022-0581: CMS dissector crash (bsc#1195870)
- Record
openSUSE-SU-2022:0722-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11858-1 No score
libwireshark15-3.6.2-2.1 on GA media
These are all security issues fixed in the libwireshark15-3.6.2-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11858-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0722-1 No score
Security update for wireshark
This update for wireshark fixes the following issues:
Update to Wireshark 3.6.2:
- CVE-2022-0586: RTMPT dissector infinite loop (bsc#1195866)
- CVE-2022-0585: Large loops in multiple dissectors (bsc#1195867)
- CVE-2022-0583: PVFS dissector crash (bsc#1195868)
- CVE-2022-0582: CSN.1 dissector crash (bsc#1195869)
- CVE-2022-0581: CMS dissector crash (bsc#1195870)
- Record
SUSE-SU-2022:0722-1- Updated
- 2026-11-02
OSVUSN-7552-1 No score
wireshark vulnerabilities
It was discovered that Wireshark did not correctly handle recursion. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-39929)
Roman Donchenko discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-4182)
It was discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-4185, CVE-2022-0581)
It was discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-4186)
Sharon Brizinov discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-0582, CVE-2022-0583, CVE-2022-0586)
Sharon Brizinov discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2022-0585)
Jason Cohen discovered that Wireshark did not correctly handle parsing certain files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-3190)
- Record
USN-7552-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
wiresharkAlpine:v3.15 |
3.4.0 up to 3.4.13-r0 | 3.4.13-r0 |
wiresharkAlpine:v3.16 |
3.4.0 up to 3.4.13-r0 | 3.4.13-r0 |
wiresharkAlpine:v3.17 |
3.4.0 up to 3.4.13-r0 | 3.4.13-r0 |
wiresharkAlpine:v3.18 |
3.4.0 up to 3.4.13-r0 | 3.4.13-r0 |
wiresharkAlpine:v3.19 |
3.4.0 up to 3.4.13-r0 | 3.4.13-r0 |
wiresharkAlpine:v3.20 |
3.4.0 up to 3.4.13-r0 | 3.4.13-r0 |
wiresharkAlpine:v3.21 |
3.4.0 up to 3.4.13-r0 | 3.4.13-r0 |
wiresharkAlpine:v3.22 |
3.4.0 up to 3.4.13-r0 | 3.4.13-r0 |
wiresharkAlpine:v3.23 |
3.4.0 up to 3.4.13-r0 | 3.4.13-r0 |
wiresharkAlpine:v3.24 |
3.4.0 up to 3.4.13-r0 | 3.4.13-r0 |
Show 46 moreShow less
| Package | Affected | Fixed |
|---|---|---|
wiresharkAzure Linux:2 |
before 3.4.14-1 | 3.4.14-1 |
wiresharkTuxCare:AlmaLinux:9.2 |
before 1:3.4.10-4.el9.tuxcare.els5 | 1:3.4.10-4.el9.tuxcare.els5 |
wireshark-cliTuxCare:AlmaLinux:9.2 |
before 1:3.4.10-4.el9.tuxcare.els5 | 1:3.4.10-4.el9.tuxcare.els5 |
wireshark-develTuxCare:AlmaLinux:9.2 |
before 1:3.4.10-4.el9.tuxcare.els5 | 1:3.4.10-4.el9.tuxcare.els5 |
wiresharkTuxCare:AlmaLinux:9.6 |
before 1:3.4.10-7.el9_6.tuxcare.els3 | 1:3.4.10-7.el9_6.tuxcare.els3 |
wireshark-cliTuxCare:AlmaLinux:9.6 |
before 1:3.4.10-7.el9_6.tuxcare.els3 | 1:3.4.10-7.el9_6.tuxcare.els3 |
wireshark-develTuxCare:AlmaLinux:9.6 |
before 1:3.4.10-7.el9_6.tuxcare.els3 | 1:3.4.10-7.el9_6.tuxcare.els3 |
wiresharkDebian:12 |
before 3.6.2-1 | 3.6.2-1 |
wiresharkDebian:13 |
before 3.6.2-1 | 3.6.2-1 |
wiresharkDebian:14 |
before 3.6.2-1 | 3.6.2-1 |
wiresharkDebian:9 From an advisory covering 9 CVEs |
before 2.6.20-0+deb9u3, plus listed versions 2.2.6+g32dac6a-22.2.6+g32dac6a-2+deb9u12.2.6+g32dac6a-2+deb9u22.2.6+g32dac6a-2+deb9u32.2.7-1 Show 26 moreShow less2.4.0-12.4.1-12.4.2-12.4.3-12.4.4-12.4.5-12.4.6-12.6.1-12.6.10-12.6.2-12.6.2-22.6.20-0+deb9u12.6.20-0+deb9u22.6.3-12.6.3-1~deb9u12.6.4-12.6.4-22.6.5-12.6.5-1~deb9u12.6.6-12.6.7-12.6.7-1~deb9u12.6.8-12.6.8-1.12.6.8-1.1~deb9u12.6.9-1 |
2.6.20-0+deb9u3 |
wiresharkDebian:11 From an advisory covering 47 CVEs |
before 3.4.16-0+deb11u1, plus listed versions 3.4.10-0+deb11u13.4.4-13.4.6-1~exp13.4.7-13.4.7-1~exp13.4.8-13.4.9-1 |
3.4.16-0+deb11u1 |
wiresharkopenEuler:22.03-LTS From an advisory covering 6 CVEs |
before 3.6.2-3.oe2203 | 3.6.2-3.oe2203 |
wiresharkSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise Real Time 15 SP2 From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Manager Proxy 4.1 From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Manager Retail Branch Server 4.1 From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Manager Server 4.1 From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Enterprise Storage 6 From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkSUSE:Enterprise Storage 7 From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkUbuntu:Pro:14.04:LTS |
before 2.6.10-1~ubuntu14.04.0~esm3, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 8 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm2 |
2.6.10-1~ubuntu14.04.0~esm3 |
wiresharkUbuntu:Pro:16.04:LTS |
before 2.6.10-1~ubuntu16.04.0+esm2, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 7 moreShow less2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm1 |
2.6.10-1~ubuntu16.04.0+esm2 |
wiresharkUbuntu:Pro:18.04:LTS |
before 2.6.10-1~ubuntu18.04.0+esm2, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 6 moreShow less2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm1 |
2.6.10-1~ubuntu18.04.0+esm2 |
wiresharkUbuntu:Pro:20.04:LTS |
before 3.2.3-1ubuntu0.1~esm2, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm1 |
3.2.3-1ubuntu0.1~esm2 |
wiresharkUbuntu:Pro:14.04:LTS From an advisory covering 10 CVEs |
before 2.6.10-1~ubuntu14.04.0~esm3, plus listed versions 1.10.2-11.10.3-11.10.5-1ubuntu11.10.5-21.10.6-1 Show 8 moreShow less1.12.1+g01b65bf-4+deb8u11ubuntu0.14.04.12.6.3-1~ubuntu14.04.12.6.4-2~ubuntu14.04.12.6.5-1~ubuntu14.04.12.6.6-1~ubuntu14.04.02.6.8-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm12.6.10-1~ubuntu14.04.0~esm2 |
2.6.10-1~ubuntu14.04.0~esm3 |
wiresharkUbuntu:Pro:16.04:LTS From an advisory covering 10 CVEs |
before 2.6.10-1~ubuntu16.04.0+esm2, plus listed versions 1.12.7+g7fc8978-11.12.8+g5b6e543-22.0.1+g59ea380-3build12.0.2+ga16e22e-12.2.6+g32dac6a-2ubuntu0.16.04 Show 7 moreShow less2.6.3-1~ubuntu16.04.12.6.4-2~ubuntu16.04.02.6.5-1~ubuntu16.04.02.6.6-1~ubuntu16.04.02.6.8-1~ubuntu16.04.02.6.10-1~ubuntu16.04.02.6.10-1~ubuntu16.04.0+esm1 |
2.6.10-1~ubuntu16.04.0+esm2 |
wiresharkUbuntu:Pro:18.04:LTS From an advisory covering 10 CVEs |
before 2.6.10-1~ubuntu18.04.0+esm2, plus listed versions 2.4.2-12.4.3-12.4.4-12.4.5-12.6.3-1~ubuntu18.04.1 Show 6 moreShow less2.6.4-2~ubuntu18.04.02.6.5-1~ubuntu18.04.02.6.6-1~ubuntu18.04.02.6.8-1~ubuntu18.04.02.6.10-1~ubuntu18.04.02.6.10-1~ubuntu18.04.0+esm1 |
2.6.10-1~ubuntu18.04.0+esm2 |
wiresharkUbuntu:Pro:20.04:LTS From an advisory covering 10 CVEs |
before 3.2.3-1ubuntu0.1~esm2, plus listed versions 3.0.5-13.0.7-13.2.1-13.2.2-13.2.3-13.2.3-1ubuntu0.1~esm1 |
3.2.3-1ubuntu0.1~esm2 |
wiresharkUbuntu:Pro:22.04:LTS From an advisory covering 10 CVEs |
before 3.6.2-2ubuntu0.1~esm1, plus listed versions 3.4.7-1~exp13.4.9-13.6.2-1ubuntu13.6.2-2 |
3.6.2-2ubuntu0.1~esm1 |
wiresharkopenSUSE:Leap 15.3 From an advisory covering 5 CVEs |
before 3.6.2-3.71.1 | 3.6.2-3.71.1 |
wiresharkopenSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 3.6.2-2.1 | 3.6.2-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-0586 is a medium vulnerability (CVSS 6.3) in Wireshark, published February 14, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.00%, the 80th percentile. Fixed in wireshark 3.4.13-r0.
References
wireshark.org/security/wnpa-sec-2022-01.html
gitlab.com/wireshark/wireshark/-/issues/17813
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN
lists.debian.org/debian-lts-announce/2022/03/msg00041.html
Show 41 moreShow less
security.gentoo.org/glsa/202210-04
nvd.nist.gov/vuln/detail/CVE-2022-0586
github.com/advisories/GHSA-m236-5q24-77fq
security.alpinelinux.org/vuln/CVE-2022-0586
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1777306004.html
security-tracker.debian.org/tracker/CVE-2022-0586
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2078
suse.com/support/update/announcement/2022/suse-su-20220722-1
bugzilla.suse.com/1195866
ubuntu.com/security/CVE-2022-0586
cve.org/CVERecord?id=CVE-2022-0586
lists.opensuse.org/archives/list/[email protected]/thread/7AGXUOAQTRI5GT64S2AG6NRTU42WI6GH