In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long, and the policy doesn't have an entry for this attribute at all (neither does it for IPv6 but v6 is manually validated).
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tcp_metrics: validar la longitud de la dirección de origen. No veo nada comprobando que TCP_METRICS_ATTR_SADDR_IPV4 tenga al menos 4 bytes de longitud y la política no tiene ninguna entrada para este atributo (tampoco lo hace para IPv6 pero v6 se valida manualmente).
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | LOW |
| Integrity Impact | LOW |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-754
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd2d2496dc0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd2d2495900> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd2d2494b80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd34017ef40> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd2d2497f00> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd2d2494880> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd2d24952c0> | Operating System |
| linux | linux_kernel | 6.10 | <built-in method update of dict object at 0x7fd34017c340> | Operating System |
| linux | linux_kernel | 6.10 | <built-in method update of dict object at 0x7fd2d24974c0> | Operating System |
| linux | linux_kernel | 6.10 | <built-in method update of dict object at 0x7fd2d2495c00> | Operating System |
| linux | linux_kernel | 6.10 | <built-in method update of dict object at 0x7fd2d2494dc0> | Operating System |
| linux | linux_kernel | 6.10 | <built-in method update of dict object at 0x7fd3401d1280> | Operating System |
| linux | linux_kernel | 6.10 | <built-in method update of dict object at 0x7fd2d2495100> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.10:rc6:*:*:*:*:*:* |