CVE-2022-0585: Debian Linux

Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 34 only; version 35 only
• Wireshark Wireshark: from 3.4.0, before 3.4.12 (fixed in 3.4.12); from 3.6.0, before 3.6.2 (fixed in 3.6.2)

Published 2022-02-18. Last modified 2026-06-17.