Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-24448

Опубликовано: 04 фев. 2022
Источник: nvd
CVSS3: 3.3
CVSS2: 1.9
EPSS Низкий

Описание

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 5.16.5 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 1%
0.00012
Низкий

3.3 Low

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-755

Связанные уязвимости

CVSS3: 3.3
ubuntu
больше 3 лет назад

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor.

CVSS3: 3.3
redhat
больше 3 лет назад

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor.

CVSS3: 3.3
msrc
больше 3 лет назад

Описание отсутствует

CVSS3: 3.3
debian
больше 3 лет назад

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.1 ...

CVSS3: 3.3
github
больше 3 лет назад

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor.

EPSS

Процентиль: 1%
0.00012
Низкий

3.3 Low

CVSS3

1.9 Low

CVSS2

Дефекты

CWE-755