CVE-2022-0582

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published: Feb 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-05837.5Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafte CVE-2022-05856.5Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or CVE-2022-05867.5Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or c CVE-2022-05876.5Improper Authorization in Packagist librenms/librenms prior to 22.2.0.CVE-2022-05886.5Missing Authorization in Packagist librenms/librenms prior to 22.2.0.CVE-2022-05895.4Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0.CVE-2022-05904.8The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings, which could allow high privilege use CVE-2022-05919.1The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues e CVE-2022-05929.8The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, l CVE-2022-05936.5The Login with phone number WordPress plugin before 1.3.7 includes a file delete.php with no form of authentication or authorization checks CVE-2022-05945.3The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one CVE-2022-05955.4The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.3 allows SVG files to be uploaded by default via the dnd_codedropz_uplo