Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-4128

Опубликовано: 28 нояб. 2022
Источник: debian
EPSS Низкий

Описание

A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect time. A local user could use this flaw to potentially crash the system causing a denial of service.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
linuxfixed5.18.14-1package
linuxnot-affectedbullseyepackage
linuxnot-affectedbusterpackage

Примечания

  • https://git.kernel.org/linus/5c835bb142d4013c2ab24bff5ae9f6709a39cbcf (5.19-rc7)

EPSS

Процентиль: 7%
0.0003
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 2 лет назад

A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect time. A local user could use this flaw to potentially crash the system causing a denial of service.

CVSS3: 5.5
redhat
почти 3 года назад

A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect time. A local user could use this flaw to potentially crash the system causing a denial of service.

CVSS3: 5.5
nvd
больше 2 лет назад

A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect time. A local user could use this flaw to potentially crash the system causing a denial of service.

CVSS3: 5.5
github
больше 2 лет назад

A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect time. A local user could use this flaw to potentially crash the system causing a denial of service.

CVSS3: 5.5
fstec
почти 3 года назад

Уязвимость реализации протокола MPTCP ядра операционной системы Linux в функции mptcp_copy_inaddrs(), позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 7%
0.0003
Низкий