CVE-2022-3725
Assigner: GitLab
Published: 2022-10-27T00:00:00
State: PUBLISHED
descriptions: value: Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file
affected: vendor: Wireshark Foundation
product: Wireshark
versions: version: >=3.6.0, <3.6.8
status: affected
credits: value: Qiuhao Li of Zoom Video Communications, Inc.
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
problemTypes: descriptions: type: text
description: Buffer copy without checking size of input ('classic buffer overflow') in Wireshark