VDB

CVE-2022-3725

CVE-2022-3725 PUBLISHED CVSS 6.3 MEDIUM

Reported by gitlab · Published October 27, 2022

Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file

Risk scores

CVSS 3.1
6.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

VendorProductVersions
Wireshark FoundationWireshark>=3.6.0, <3.6.8
amazon:2023wireshark-devel0
amazon:2023wireshark-cli0
Wireshark FoundationWireshark3.6.0

Timeline

  • Oct 27, 2022 CVE Published
  • Oct 27, 2022 PoC Published (2 in total, the first dated here)
  • Oct 28, 2022 EPSS Score (30 in total, the first dated here)
  • May 9, 2025 CVE Updated
  • Mar 10, 2026 Security Advisory (2 in total, the first dated here)
  • Jun 19, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2022-3725
vulnetix vdb fixes CVE-2022-3725

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-3725/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›