Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-cf9ae8e4ff advisory.

    New version 4.0.1, Fix for bug #2148308, fix for CVE-2022-3725

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the wireshark package has been released.

The remote host is affected by the vulnerability described in GLSA-202309-02 (Wireshark: Multiple Vulnerabilities)

  - Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet     injection or crafted capture file (CVE-2022-3725)

  - Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version     4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution     in the context of the process running Wireshark. (CVE-2023-0666)

  - Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version     4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly     code execution in the context of the process running Wireshark (CVE-2023-0667)

  - Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark     version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code     execution in the context of the process running Wireshark. (CVE-2023-0668)

  - ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of     service via packet injection or crafted capture file (CVE-2023-1161)

  - RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1992)

  - LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via     packet injection or crafted capture file (CVE-2023-1993)

  - GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet     injection or crafted capture file (CVE-2023-1994)

  - BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted     capture file (CVE-2023-2854, CVE-2023-2857)

  - Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     crafted capture file (CVE-2023-2855)

  - VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service     via crafted capture file (CVE-2023-2856)

  - NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     crafted capture file (CVE-2023-2858)

  - GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet     injection or crafted capture file (CVE-2023-2879)

  - XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via     packet injection or crafted capture file (CVE-2023-2952)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-038 advisory.

    A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in     the IPPUSB dissector can cause a denial of service via a packet injection or a crafted capture file.
    (CVE-2021-39920)

    A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in     the Modbus dissector can cause a denial of service via a packet injection or crafted capture file.
    (CVE-2021-39921)

    A flaw was found in Wireshark. A process failure on crafted or malformed ANSI C12.22  input can cause a     denial of service via packet injection or a crafted capture file. (CVE-2021-39922)

    A flaw was found in Wireshark. A process failure consumes excessive CPU resources on crafted or malformed     PNRP input and can cause a denial of service. (CVE-2021-39923)

    A flaw was found in Wireshark. A process failure on crafted or malformed Bluetooth DHT input can cause a     denial of service via packet injection or a crafted capture file. (CVE-2021-39924)

    A flaw was found in Wireshark. A process failure on crafted or malformed Bluetooth SDP input can cause a     denial of service via packet injection or a crafted capture file. (CVE-2021-39925)

    A flaw was found in Wireshark. A process failure on crafted or malformed HCI_ISO input can cause a denial     of service via packet injection or a crafted capture file. (CVE-2021-39926)

    A flaw was found in Wireshark. A process failure on crafted or malformed IEEE 802.11 input can cause a     denial of service via packet injection or a crafted capture file. (CVE-2021-39928)

    A flaw was found in Wireshark.  A process failure on crafted or malformed  Bluetooth DHT input can cause a     denial of service. (CVE-2021-39929)

    A denial of service via packet injection flaw was found in wireshark. An attacker with local network     access could pass specially crafted capture files causing an application to halt or crash, leading to a     denial of service. (CVE-2021-4181)

    A parser infinite-loop flaw was found in wireshark. An attacker with local network access could pass     specially crafted capture files causing an application to halt, crash, or infinite loop. (CVE-2021-4182)

    An infinite-loop flaw was found in Wireshark's DHT dissector module. This flaw allows an attacker with     local network access to pass specially crafted capture files, causing an application to halt, crash or go     into an infinite loop. (CVE-2021-4184)

    An infinite-loop flaw was found in Wireshark RTMPT. This flaw allows an attacker with local network access     to pass specially crafted capture files, causing an application to halt, crash, or go into an infinite     loop. (CVE-2021-4185)

    A segmentation issue was found in Wireshark. This flaw allows an attacker with local network access to     pass specially crafted capture files, causing an application to halt or crash. (CVE-2021-4186)

    An infinite-loop flaw was found in Wireshark. This flaw allows an attacker with local network access to     pass specially crafted capture files, causing an application to halt, crash, or go into an infinite loop.
    (CVE-2021-4190)

    Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of     service via packet injection or crafted capture file (CVE-2022-0581)

    Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows     denial of service via packet injection or crafted capture file (CVE-2022-0582)

    Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of     service via packet injection or crafted capture file (CVE-2022-0583)

    Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial     of service via packet injection or crafted capture file (CVE-2022-0585)

    Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of     service via packet injection or crafted capture file (CVE-2022-0586)

    Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to     3.4.15 allows denial of service via packet injection or crafted capture file. (CVE-2022-3190)

    Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet     injection or crafted capture file (CVE-2022-3725)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2023-268 advisory.

    Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet     injection or crafted capture file (CVE-2022-3725)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4453-1 advisory.

  - Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet     injection or crafted capture file (CVE-2022-3725)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
211118	Fedora 37 : wireshark (2022-cf9ae8e4ff)	Nessus	Fedora Local Security Checks	high
204062	Photon OS 3.0: Wireshark PHSA-2022-3.0-0491	Nessus	PhotonOS Local Security Checks	high
203311	Photon OS 4.0: Wireshark PHSA-2022-4.0-0288	Nessus	PhotonOS Local Security Checks	high
181506	GLSA-202309-02 : Wireshark: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
173123	Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-038)	Nessus	Amazon Linux Local Security Checks	critical
170590	Amazon Linux 2022 : wireshark-cli, wireshark-devel (ALAS2022-2023-268)	Nessus	Amazon Linux Local Security Checks	high
168721	SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2022:4453-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-3725

high

Tenable Plugins

high

high

high

high

critical

high

high