Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2022-2964

Опубликовано: 21 мар. 2022
Источник: redhat
CVSS3: 7.8

Описание

A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options does not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernel-rtFixedRHSA-2023:040024.01.2023
Red Hat Enterprise Linux 7kernelFixedRHSA-2023:039924.01.2023
Red Hat Enterprise Linux 7kpatch-patchFixedRHSA-2023:040424.01.2023
Red Hat Enterprise Linux 8kernel-rtFixedRHSA-2023:011412.01.2023
Red Hat Enterprise Linux 8kernelFixedRHSA-2023:010112.01.2023
Red Hat Enterprise Linux 8kpatch-patchFixedRHSA-2023:012312.01.2023
Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionskernelFixedRHSA-2023:085621.02.2023
Red Hat Enterprise Linux 8.1 Update Services for SAP Solutionskpatch-patchFixedRHSA-2023:085821.02.2023
Red Hat Enterprise Linux 8.2 Advanced Update SupportkernelFixedRHSA-2023:039524.01.2023

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-119
https://bugzilla.redhat.com/show_bug.cgi?id=2067482kernel: memory corruption in AX88179_178A based USB ethernet device.

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 3 года назад

A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.

CVSS3: 7.8
nvd
почти 3 года назад

A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.

CVSS3: 7.8
debian
почти 3 года назад

A flaw was found in the Linux kernel\u2019s driver for the ASIX AX8817 ...

CVSS3: 7.8
github
почти 3 года назад

A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.

CVSS3: 8.4
fstec
почти 3 года назад

Уязвимость драйвера ядра операционной системы Linux для устройств USB 2.0/3.0 Gigabit Ethernet на базе ASIX AX88179_178A, позволяющая нарушителю получить потенциально конфиденциальную информацию

7.8 High

CVSS3