CVE-2022-3190: fedoraproject fedora Infinite Loop
CVSS: 6.3v3.1MediumModified
AliasesRHSA-2023:2373UBUNTU-CVE-2022-3190DEBIAN-CVE-2022-3190
Published 13-09-2022Last modified 03-11-2025
Vulnerability summary
CVE-2022-3190 is a medium (CVSS 6.3) Infinite Loop vulnerability in fedoraproject fedora. EPSS estimates a 2.27% chance of exploitation in the next 30 days, higher than 82.7% of scored vulnerabilities. 2 public exploits are recorded.
CVSS score
6.3/10
010
Medium · v3.1 (CVE.org)EPSS score
2.27%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits2reference
Advisory lineage
Upstream 0 · Downstream 4 · Related 3Timeline
- 13-09-2022PublishedVulnerability first disclosed.
- 03-11-2025Last modifiedVulnerability information updated.
Description
Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file
CVSS metrics
5 scores · 5 sources · 1 versionMedium 6.3Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LSources5 sources · 5.5–6.3
- OSV · Red hatEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HDiffers
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HDiffers
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
2.27%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
0.00 pp
From 2.27% on 18-09-2026
18-09-202618-10-2026
EPSS score2.27%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (wireshark.org)
Maturity: unknown
Exploit Reference (gitlab.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Redhat6 products
- wireshark< 1:3.4.10-4.el9
- wireshark-cli< 1:3.4.10-4.el9
- wireshark-cli-debuginfo< 1:3.4.10-4.el9
- wireshark-debuginfo< 1:3.4.10-4.el9
- wireshark-debugsource< 1:3.4.10-4.el9
Debian1 product
- wireshark< 3.6.8-1
Fedoraproject1 product
- fedoraEOL36 | 37
Sharkfest foundation1 product
- wireshark≥ 3.6.0, < 3.6.8 | ≥ 3.4.0, < 3.4.16
Ubuntu1 product
- wireshark< 3.6.2-2ubuntu0.1~esm1
Wireshark1 product
- wireshark≥ 3.4.0, < 3.4.16 | ≥ 3.6.0, < 3.6.8
6 vendors · 11 products
References
19 links- www.wireshark.org/security/wnpa-sec-2022-06.htmlARTICLEREPORTExploitIssue TrackingThird Party Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
