CVE-2022-3725

Name of the Vulnerable Software and Affected Versions Wireshark versions 3.6.0 through 3.6.8

Description The issue is related to a crash in the OPUS protocol dissector, which allows for denial of service via packet injection or crafted capture file. This can be exploited by injecting packets or using a specially crafted capture file.

Recommendations For Wireshark versions 3.6.0 through 3.6.8, consider disabling the OPUS protocol dissector as a temporary workaround until a patch is available. Restrict access to the OPUS protocol dissector to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.