CVE-2022-1204

Опубликовано: 29 авг. 2022

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

Ссылки

https://access.redhat.com/security/cve/CVE-2022-1204
Issue Tracking
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2071051
Issue Tracking
Patch
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2022-1204
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/04/02/2
Exploit
Mailing List
Patch
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-1204
Issue Tracking
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2071051
Issue Tracking
Patch
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2022-1204
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/04/02/2
Exploit
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 5.17 (исключая)

cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.00082

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2022-1204

CVSS3: 5.5

ubuntu

больше 3 лет назад

A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

CVE-2022-1204

CVSS3: 5.1

redhat

почти 4 года назад

A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.

CVE-2022-1204

CVSS3: 5.5

msrc

больше 3 лет назад

Описание отсутствует

CVE-2022-1204

CVSS3: 5.5

debian

больше 3 лет назад

A use-after-free flaw was found in the Linux kernel\u2019s Amateur Rad ...

BDU:2022-06399

CVSS3: 5.5

fstec

больше 3 лет назад

Уязвимость реализации протокола Amateur Radio AX.25 ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 24%

0.00082

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-416