CVE catalog

CVE-2022-3724

wireshark affected and fixed versions

Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: Oct 26, 2022, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 2.54% · Oct 27, 2026

Projects and upstream resources

[wireshark][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie-security	wireshark	`4.4.19-0+deb13u1`	Not affected	[CVE-2022-3724]
Debiantrixie	wireshark	Not reported	Not affectedDistribution reports not affected	[CVE-2022-3724]
Debiantrixie	wireshark	`4.4.18-0+deb13u1`	Not affected	[CVE-2022-3724]
Debiansid	wireshark	Not reported	Not affectedDistribution reports not affected	[CVE-2022-3724]
Debiansid	wireshark	`4.6.9-1`	Not affected	[CVE-2022-3724]
Ubuntupro	wireshark	`3.4.7-1~exp1`	UnknownSource applicability is not established	[UBUNTU-CVE-2022-3724]Apr 22, 2026, 1:21:49 PM UTC
Ubuntupro	wireshark	`3.4.9-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2022-3724]Apr 22, 2026, 1:21:49 PM UTC
Ubuntupro	wireshark	`3.6.2-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2022-3724]Apr 22, 2026, 1:21:49 PM UTC
Ubuntupro	wireshark	`3.6.2-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2022-3724]Apr 22, 2026, 1:21:49 PM UTC
Ubuntupro	wireshark	`3.6.2-2ubuntu0.1~esm1`	UnknownSource applicability is not established	[UBUNTU-CVE-2022-3724]Apr 22, 2026, 1:21:49 PM UTC
Debianforky	wireshark	Not reported	Not affectedDistribution reports not affected	[CVE-2022-3724]
Debianforky	wireshark	`4.6.9-1`	Not affected	[CVE-2022-3724]

Showing 12 observations. All 16 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	wireshark	Not reported	UnknownSource applicability is not established	Provider not reported
Debianbookworm	wireshark	Not reported	Not affectedDistribution reports not affected	[CVE-2022-3724]
Debianbookworm	wireshark	`4.0.17-0+deb12u3`	Not affected	[CVE-2022-3724]
Debianbookworm-security	wireshark	`4.0.17-0+deb12u3`	Not affected	[CVE-2022-3724]
Debianforky	wireshark	Not reported	Not affectedDistribution reports not affected	[CVE-2022-3724]
Debianforky	wireshark	`4.6.9-1`	Not affected	[CVE-2022-3724]
Debiansid	wireshark	Not reported	Not affectedDistribution reports not affected	[CVE-2022-3724]
Debiansid	wireshark	`4.6.9-1`	Not affected	[CVE-2022-3724]
Debiantrixie	wireshark	Not reported	Not affectedDistribution reports not affected	[CVE-2022-3724]
Debiantrixie	wireshark	`4.4.18-0+deb13u1`	Not affected	[CVE-2022-3724]
Debiantrixie-security	wireshark	`4.4.19-0+deb13u1`	Not affected	[CVE-2022-3724]
Ubuntupro	wireshark	`3.4.7-1~exp1`	UnknownSource applicability is not established	[UBUNTU-CVE-2022-3724]Apr 22, 2026, 1:21:49 PM UTC
Ubuntupro	wireshark	`3.4.9-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2022-3724]Apr 22, 2026, 1:21:49 PM UTC
Ubuntupro	wireshark	`3.6.2-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2022-3724]Apr 22, 2026, 1:21:49 PM UTC
Ubuntupro	wireshark	`3.6.2-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2022-3724]Apr 22, 2026, 1:21:49 PM UTC
Ubuntupro	wireshark	`3.6.2-2ubuntu0.1~esm1`	UnknownSource applicability is not established	[UBUNTU-CVE-2022-3724]Apr 22, 2026, 1:21:49 PM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "wireshark",
      "status": "not affected",
      "release": "sid",
      "version": "4.6.9-1"
    },
    {
      "name": "wireshark",
      "status": "not affected",
      "release": "forky",
      "version": "4.6.9-1"
    },
    {
      "name": "wireshark",
      "status": "not affected",
      "release": "trixie",
      "version": "4.4.18-0+deb13u1"
    },
    {
      "name": "wireshark",
      "status": "not affected",
      "release": "trixie-security",
      "version": "4.4.19-0+deb13u1"
    },
    {
      "name": "wireshark",
      "status": "not affected",
      "release": "bookworm",
      "version": "4.0.17-0+deb12u3"
    },
    {
      "name": "wireshark",
      "status": "not affected",
      "release": "bookworm-security",
      "version": "4.0.17-0+deb12u3"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "wireshark",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "wireshark",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "wireshark",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": "0"
    },
    {
      "bug": null,
      "name": "wireshark",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": "0"
    }
  ],
  "distribution_packages": [
    {
      "name": "wireshark",
      "fixed_version": "0",
      "applicability_unknown": true
    },
    {
      "name": "wireshark",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.4.7-1~exp1",
        "3.4.9-1",
        "3.6.2-1ubuntu1",
        "3.6.2-2",
        "3.6.2-2ubuntu0.1~esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-3724",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-3724",
      "provider_updated_at": "2026-04-22T13:21:49.600821Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libwireshark16]Unknown
Source package: [wireshark]
Details (4)
- 4.0.17-0+deb12u3 · amd64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · amd64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[libwireshark-data]Unknown
Source package: [wireshark]
Details (6)
- 4.0.17-0+deb12u3 · all · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · all · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · all · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · all · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.6-1~deb12u1 · all · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.6-1~deb12u1 · all · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[libwireshark-dev]Unknown
Source package: [wireshark]
Details (4)
- 4.0.17-0+deb12u3 · amd64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · amd64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[libwiretap13]Unknown
Source package: [wireshark]
Details (4)
- 4.0.17-0+deb12u3 · amd64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · amd64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[libwiretap-dev]Unknown
Source package: [wireshark]
Details (4)
- 4.0.17-0+deb12u3 · amd64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · amd64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[libwsutil14]Unknown
Source package: [wireshark]
Details (4)
- 4.0.17-0+deb12u3 · amd64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · amd64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[libwsutil-dev]Unknown
Source package: [wireshark]
Details (4)
- 4.0.17-0+deb12u3 · amd64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · amd64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[tshark]Unknown
Source package: [wireshark]
Details (4)
- 4.0.17-0+deb12u3 · amd64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · amd64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[wireshark]Unknown
Details (4)
- 4.0.17-0+deb12u3 · amd64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · amd64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[wireshark-common]Unknown
Source package: [wireshark]
Details (4)
- 4.0.17-0+deb12u3 · amd64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · amd64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[wireshark-dev]Unknown
Source package: [wireshark]
Details (4)
- 4.0.17-0+deb12u3 · amd64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · amd64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[wireshark-doc]Unknown
Source package: [wireshark]
Details (6)
- 4.0.17-0+deb12u3 · all · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · all · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · all · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · all · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.6-1~deb12u1 · all · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.6-1~deb12u1 · all · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[wireshark-gtk]Unknown
Source package: [wireshark]
Details (2)
- 4.0.6-1~deb12u1 · amd64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.6-1~deb12u1 · arm64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
[wireshark-qt]Unknown
Source package: [wireshark]
Details (4)
- 4.0.17-0+deb12u3 · amd64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · amd64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm
- 4.0.17-0+deb12u3 · arm64 · bookworm-security
  Not affected
  dsa · wireshark · debian · bookworm

Observed: Oct 28, 2026, 6:14:38 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]