CVE-2022-43590

Опубликовано: 28 нояб. 2022

Источник: nvd

CVSS3: 6.2

CVSS3: 5.5

EPSS Низкий

Описание

A null pointer dereference vulnerability exists in the handle_ioctl_0x830a0_systembuffer functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability.

Ссылки

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1649
Exploit
Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1649
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:callback:cbfs_filter:20.0.8317:*:*:*:*:*:*:*

EPSS

Процентиль: 9%

0.00031

Низкий

6.2 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

GHSA-f3q8-93gp-933x

CVSS3: 5.5

github

около 3 лет назад

A null pointer dereference vulnerability exists in the handle_ioctl_0x830a0_systembuffer functionality of Callback technologies CBFS Filter 20.0.8317. A specially-crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability.

EPSS

Процентиль: 9%

0.00031

Низкий

6.2 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-476