CVE-2022-3190

wireshark: The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a comput...

CVE-2022-3190 is fixed in 13 products on 1 platform, first by libwireshark-data 3.6.2-2ubuntu0.1~esm1, released September 13, 2022. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0230
83rd percentile

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fix(es): * wireshark: f5ethtrailer Infinite loop in legacy style dissector (CVE-2022-3190) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
libwireshark-data · Ubuntu 22.04.1 LTS (jammy) 3.6.2-2ubuntu0.1~esm1 libwireshark-data 3.6.2-2ubuntu0.1~esm1 Sep 13, 2022
libwireshark15 · Ubuntu 22.04.1 LTS (jammy) 3.6.2-2ubuntu0.1~esm1 libwireshark15 3.6.2-2ubuntu0.1~esm1 Sep 13, 2022
libwiretap12 · Ubuntu 22.04.1 LTS (jammy) 3.6.2-2ubuntu0.1~esm1 libwiretap12 3.6.2-2ubuntu0.1~esm1 Sep 13, 2022
libwsutil13 · Ubuntu 22.04.1 LTS (jammy) 3.6.2-2ubuntu0.1~esm1 libwsutil13 3.6.2-2ubuntu0.1~esm1 Sep 13, 2022
tshark · Ubuntu 22.04.1 LTS (jammy) 3.6.2-2ubuntu0.1~esm1 tshark 3.6.2-2ubuntu0.1~esm1 Sep 13, 2022
wireshark · Debian 12.15 (bookworm) 3.6.8-1 DEBIAN-CVE-2022-3190 Sep 13, 2022
wireshark · Debian 13.5 (trixie) 3.6.8-1 DEBIAN-CVE-2022-3190 Sep 13, 2022
wireshark · Debian 14 3.6.8-1 DEBIAN-CVE-2022-3190 Sep 13, 2022
wireshark · RHEL 9 1:3.4.10-4.el9 RHSA-2023:2373 May 9, 2023
wireshark · Ubuntu 22.04.1 LTS (jammy) 3.6.2-2ubuntu0.1~esm1 wireshark 3.6.2-2ubuntu0.1~esm1 Sep 13, 2022
wireshark · almalinux 9 1:3.4.10-4.el9 ALSA-2023:2373 May 9, 2023
wireshark · ol 9 1:3.4.10-4.el9 ELSA-2023-2373 May 15, 2023
wireshark-cli · RHEL 9 1:3.4.10-4.el9 RHSA-2023:2373 May 9, 2023
wireshark-cli · almalinux 9 1:3.4.10-4.el9 ALSA-2023:2373 May 9, 2023
wireshark-cli · amzn 2023 1:4.0.2-1.amzn2023.0.2 ALAS2023-2023-038 Feb 17, 2023
wireshark-cli · ol 9 1:3.4.10-4.el9 ELSA-2023-2373 May 15, 2023
wireshark-cli-debuginfo · amzn 2023 1:4.0.2-1.amzn2023.0.2 ALAS2023-2023-038 Feb 17, 2023
wireshark-common · Ubuntu 22.04.1 LTS (jammy) 3.6.2-2ubuntu0.1~esm1 wireshark-common 3.6.2-2ubuntu0.1~esm1 Sep 13, 2022
wireshark-debugsource · amzn 2023 1:4.0.2-1.amzn2023.0.2 ALAS2023-2023-038 Feb 17, 2023
wireshark-devel · RHEL 9 1:3.4.10-4.el9 RHSA-2023:2373 May 9, 2023
wireshark-devel · almalinux 9 1:3.4.10-4.el9 ALSA-2023:2373 May 9, 2023
wireshark-devel · amzn 2023 1:4.0.2-1.amzn2023.0.2 ALAS2023-2023-038 Feb 17, 2023
wireshark-devel · ol 9 1:3.4.10-4.el9 ELSA-2023-2373 May 15, 2023
wireshark-gtk · Ubuntu 22.04.1 LTS (jammy) 3.6.2-2ubuntu0.1~esm1 wireshark-gtk 3.6.2-2ubuntu0.1~esm1 Sep 13, 2022
wireshark-qt · Ubuntu 22.04.1 LTS (jammy) 3.6.2-2ubuntu0.1~esm1 wireshark-qt 3.6.2-2ubuntu0.1~esm1 Sep 13, 2022

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.