CVE-2022-2078

CVSS v3.1 5.5 (Medium)

CVSS v2.0 2.1 (Low)

EPSS 0.08 % (37^th)

Affected Products 4

Advisories 13

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

Weaknesses

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-121: Stack-based Buffer Overflow

Related CVEs

CVE-2022-1972

CVE Status: PUBLISHED
CNA: Red Hat, Inc.
Published Date: 2022-06-30 13:15:08
(2 years ago)
Updated Date: 2022-10-26 17:06:54
(23 months ago)

Affected Products

Debian

Debian Linux

Linux

Linux Kernel

Redhat

Configuration #1

		CPE23	From	Up To
	Linux Kernel prior 5.19 version	cpe:2.3:o:linux:linux_kernel		< 5.19

Configuration #2

		CPE23	From	Up To
	Redhat Virtualization 4.0	cpe:2.3:a:redhat:virtualization:4.0
	Redhat Enterprise Linux 8.0	cpe:2.3:o:redhat:enterprise_linux:8.0
	Redhat Enterprise Linux 9.0	cpe:2.3:o:redhat:enterprise_linux:9.0

Configuration #3

		CPE23	From	Up To
	Debian Linux 11.0	cpe:2.3:o:debian:debian_linux:11.0