Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-0324

Опубликовано: 14 нояб. 2022
Источник: nvd
CVSS3: 8.1
CVSS3: 7.5
EPSS Низкий

Описание

There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown.

Discovered by Eugene Lim of GovTech Singapore.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:linuxfoundation:software_for_open_networking_in_the_cloud:202111:*:*:*:*:*:*:*

EPSS

Процентиль: 75%
0.00888
Низкий

8.1 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-120
CWE-120

Связанные уязвимости

CVSS3: 7.5
github
около 3 лет назад

There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown. Discovered by Eugene Lim of GovTech Singapore.

EPSS

Процентиль: 75%
0.00888
Низкий

8.1 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-120
CWE-120