Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-12994.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-12994
Upstream
Published
2023-01-12T00:15:08Z
Modified
2026-04-01T05:07:24.831482Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVSS Calculator
Summary
CVE-2022-4344 affecting package wireshark for versions less than 4.0.8-1
Details

Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file

References

Affected packages

Azure Linux:2 / wireshark

Package

Name
wireshark
Purl
pkg:rpm/azure-linux/wireshark

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.0.8-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-12994.json"