CVE-2022-25636

Опубликовано: 24 фев. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 6.9

EPSS Низкий

Описание

net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.

Ссылки

http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html
Third Party Advisory
VDB Entry
http://www.openwall.com/lists/oss-security/2022/02/22/1
Mailing List
Patch
Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git/commit/?id=b1a5983f56e371046dcf164f90bfaf704d2b89f6
Patch
Vendor Advisory
https://github.com/Bonfee/CVE-2022-25636
Exploit
Third Party Advisory
https://nickgregory.me/linux/security/2022/03/12/cve-2022-25636/
Exploit
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220325-0002/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5095
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/02/21/2
Exploit
Mailing List
Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html
Patch
Third Party Advisory
http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html
Third Party Advisory
VDB Entry
http://www.openwall.com/lists/oss-security/2022/02/22/1
Mailing List
Patch
Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git/commit/?id=b1a5983f56e371046dcf164f90bfaf704d2b89f6
Patch
Vendor Advisory
https://github.com/Bonfee/CVE-2022-25636
Exploit
Third Party Advisory
https://nickgregory.me/linux/security/2022/03/12/cve-2022-25636/
Exploit
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220325-0002/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5095
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/02/21/2
Exploit
Mailing List
Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.4 (включая) до 5.4.182 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.10.103 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.26 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 5.16.12 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_cloud_native_core_network_exposure_function:22.1.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00532

Низкий

7.8 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-269

Связанные уязвимости

CVE-2022-25636

CVSS3: 7.8

ubuntu

больше 3 лет назад

net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.

CVE-2022-25636

CVSS3: 7.8

redhat

больше 3 лет назад

net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.

CVE-2022-25636

CVSS3: 7.8

debian

больше 3 лет назад

net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 a ...

RLSA-2022:1550

rocky

около 3 лет назад

Important: kernel security and bug fix update

GHSA-44m9-c2jp-x4c5

CVSS3: 7.8

github

больше 3 лет назад

net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.

EPSS

Процентиль: 66%

0.00532

Низкий

7.8 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-269