yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2022-4344
Component Overview
Vulnerability Overview
Name
CVE-2022-4344
Source
NVD (
link
)
Debian (
link
)
Description
Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file
CWEs
CWE-400
CWE-400
Published Date
Jan 12, 2023
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json
Third Party Advisory
https://www.wireshark.org/security/wnpa-sec-2022-10.html
Vendor Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4344.json
Third Party Advisory
https://www.wireshark.org/security/wnpa-sec-2022-10.html
Vendor Advisory
Analysis
#
Affected Component
Analysis
wireshark
Exploitable
Vulnerability Ratings
#
6.3
CVSSv31
4.3
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
wireshark
buildroot
2025.02.x
4.2.14
Not Affected
wireshark
buildroot
master
4.4.16
Not Affected
wireshark
yocto
master
4.6.6
Not Affected
wireshark
yocto
scarthgap
4.2.14
Not Affected