IM
IronMonkey Threat Research

CVE-2022-1012 HIGH

Published: 2022-08-05 | Last Modified: 2024-11-21 | Status: Modified

Description

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem.

Additional Descriptions (1)

Se ha encontrado un problema de pérdida de memoria en el algoritmo de generación de puertos de origen TCP en el archivo net/ipv4/tcp.c debido al pequeño tamaño de la tabla de perturbación. Este fallo puede permitir a un atacante un filtrado de información y puede causar un problema de denegación de servicio

CVSS Metrics

Base Score: 8.2 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactLOW
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 4.2

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-401
[email protected] Secondary
en CWE-401

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd340ac8080> Operating System
linux linux_kernel 5.18 <built-in method update of dict object at 0x7fd340acb540> Operating System
linux linux_kernel 5.18 <built-in method update of dict object at 0x7fd39c40aa00> Operating System
linux linux_kernel 5.18 <built-in method update of dict object at 0x7fd368dcf240> Operating System
linux linux_kernel 5.18 <built-in method update of dict object at 0x7fd340acb880> Operating System
linux linux_kernel 5.18 <built-in method update of dict object at 0x7fd340ac8480> Operating System
linux linux_kernel 5.18 <built-in method update of dict object at 0x7fd340a33d80> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.18:-:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.18:rc2:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.18:rc3:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.18:rc4:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:5.18:rc5:*:*:*:*:*:*

References