CVE-2022-32296

CVSS v3.1 3.3 (Low)

CVSS v2.0 2.1 (Low)

EPSS 0.05 % (19^th)

Affected Products 1

Advisories 25

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.

Weaknesses

CWE-203: Observable Discrepancy

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2022-06-05 22:15:08
(2 years ago)
Updated Date: 2022-09-28 15:15:13
(23 months ago)

Affected Products

Linux

Linux Kernel

Configuration #1

		CPE23	From	Up To
	Linux Kernel prior 5.17.9 version	cpe:2.3:o:linux:linux_kernel		< 5.17.9