CVE-2022-3724

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-134

Affected software

Vendor	Product	Versions
Wireshark Foundation	Wireshark	>=3.6.0, <3.6.8

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3724.jsonThird Party Advisory
https://gitlab.com/wireshark/wireshark/-/issues/18384Issue Tracking, Third Party Advisory
https://www.wireshark.org/security/wnpa-sec-2022-08.htmlVendor Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3724.jsonThird Party Advisory
https://gitlab.com/wireshark/wireshark/-/issues/18384Issue Tracking, Third Party Advisory
https://www.wireshark.org/security/wnpa-sec-2022-08.htmlVendor Advisory

Timeline

Published: Dec 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-372409.8MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.CVE-2022-372415.4MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoin CVE-2022-372429.8MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.CVE-2022-372435.4MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.CVE-2022-372445.4MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login CVE-2022-372455.4MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.CVE-2022-372465.4Craft CMS 4.2.0.1 is affected by Cross Site Scripting (XSS) in the file src/web/assets/cp/src/js/BaseElementSelectInput.js and in specific o CVE-2022-372475.4Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.CVE-2022-372485.4Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via src/helpers/Cp.php.CVE-2022-37257.5Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file CVE-2022-372505.4Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in /admin/myaccount.CVE-2022-372515.4Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts.