exploitDog

CVE-2022-3635

Опубликовано: 21 окт. 2022

Источник: nvd

CVSS3: 5.5

CVSS3: 7

EPSS Низкий

Описание

A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. VDB-211934 is the identifier assigned to this vulnerability.

Ссылки

https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=3f4093e2bf4673f218c0bf17d8362337c400e77b
Exploit
Mailing List
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
Mailing List
Third Party Advisory
https://vuldb.com/?id.211934
Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git/commit/?id=3f4093e2bf4673f218c0bf17d8362337c400e77b
Exploit
Mailing List
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html
Mailing List
Third Party Advisory
https://vuldb.com/?id.211934
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.12 (включая) до 4.9.326 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.10 (включая) до 4.14.291 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.15 (включая) до 4.19.256 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.20 (включая) до 5.4.211 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.10.138 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.63 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 5.19.4 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 1%

0.00011

Низкий

5.5 Medium

CVSS3

7 High

CVSS3

Дефекты

CWE-119

CWE-362

Связанные уязвимости

CVE-2022-3635

CVSS3: 5.5

ubuntu

больше 3 лет назад

A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. VDB-211934 is the identifier assigned to this vulnerability.

CVE-2022-3635

CVSS3: 7

redhat

больше 3 лет назад

A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. VDB-211934 is the identifier assigned to this vulnerability.

CVE-2022-3635

CVSS3: 5.5

debian

больше 3 лет назад

A vulnerability, which was classified as critical, has been found in L ...

GHSA-344p-v638-q9gc

CVSS3: 7

github

больше 3 лет назад

A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. VDB-211934 is the identifier assigned to this vulnerability.

BDU:2023-04272

CVSS3: 7

fstec

больше 3 лет назад

Уязвимость функции idt77252_exit() в модуле drivers/atm/idt77252.c сетевого драйвера ATM idt77252 операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 1%

0.00011

Низкий

5.5 Medium

CVSS3

7 High

CVSS3

Дефекты

CWE-119

CWE-362