exploitDog

CVE-2022-3564

Опубликовано: 17 окт. 2022

Источник: nvd

CVSS3: 5.5

CVSS3: 7.1

EPSS Низкий

Описание

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.

Ссылки

https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=89f9f3cb86b1c63badaf392a83dd661d56cc50b1
Patch
https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20221223-0001/
Third Party Advisory
https://vuldb.com/?id.211087
Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=89f9f3cb86b1c63badaf392a83dd661d56cc50b1
Patch
https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20221223-0001/
Third Party Advisory
https://vuldb.com/?id.211087
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.6 (включая) до 4.9.333 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.10 (включая) до 4.14.299 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.15 (включая) до 4.19.265 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.20 (включая) до 5.4.224 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5.0 (включая) до 5.10.154 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.78 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.0.8 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00063

Низкий

5.5 Medium

CVSS3

7.1 High

CVSS3

Дефекты

CWE-119

CWE-362

Связанные уязвимости

CVE-2022-3564

CVSS3: 5.5

ubuntu

больше 2 лет назад

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.

CVE-2022-3564

CVSS3: 7.1

redhat

больше 2 лет назад

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087.

CVE-2022-3564

CVSS3: 5.5

debian

больше 2 лет назад

A vulnerability classified as critical was found in Linux Kernel. Affe ...

SUSE-SU-2023:0560-1

suse-cvrf

больше 2 лет назад

Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP2)

SUSE-SU-2023:0552-1

suse-cvrf

больше 2 лет назад

Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP2)

EPSS

Процентиль: 20%

0.00063

Низкий

5.5 Medium

CVSS3

7.1 High

CVSS3

Дефекты

CWE-119

CWE-362