CVE-2022-3725

Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file

Credits

Qiuhao Li of Zoom Video Communications, Inc.

References

https://www.wireshark.org/security/wnpa-sec-2022-07.html

https://gitlab.com/wireshark/wireshark/-/issues/18378

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3725.json

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OIEIFFZ27YKCTK5C2VT4OEQSHPQDBNSF/

https://security.gentoo.org/glsa/202309-02