CVE-2022-2586

Опубликовано: 08 янв. 2024

Источник: nvd

CVSS3: 5.3

CVSS3: 7.8

EPSS Низкий

Описание

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

Ссылки

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586
Third Party Advisory
https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t
Mailing List
Patch
https://ubuntu.com/security/notices/USN-5557-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5560-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5560-2
Third Party Advisory
https://ubuntu.com/security/notices/USN-5562-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5564-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5565-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5566-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5567-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5582-1
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/08/09/5
Mailing List
https://www.zerodayinitiative.com/advisories/ZDI-22-1118/
Third Party Advisory
VDB Entry
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586
Third Party Advisory
https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t
Mailing List
Patch
https://ubuntu.com/security/notices/USN-5557-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5560-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5560-2
Third Party Advisory
https://ubuntu.com/security/notices/USN-5562-1
Third Party Advisory
https://ubuntu.com/security/notices/USN-5564-1
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 5.19.17 (включая)

cpe:2.3:o:linux:linux_kernel:6.0:-:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 80%

0.01471

Низкий

5.3 Medium

CVSS3

7.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2022-2586

CVSS3: 5.3

ubuntu

больше 1 года назад

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

CVE-2022-2586

CVSS3: 6.7

redhat

почти 3 года назад

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

CVE-2022-2586

CVSS3: 7.8

msrc

больше 1 года назад

Описание отсутствует

CVE-2022-2586

CVSS3: 5.3

debian

больше 1 года назад

It was discovered that a nft object or expression could reference a nf ...

BDU:2022-05140

CVSS3: 7.8

fstec

почти 3 года назад

Уязвимость подсистемы netfilter ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код.

EPSS

Процентиль: 80%

0.01471

Низкий

5.3 Medium

CVSS3

7.8 High

CVSS3

Дефекты

CWE-416