CVE-2022-2078

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

Published: Jun 30, 2022
Updated: Apr 14, 2023
CVE: CVE-2022-2078
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Low
Score: 2.1
AV:L/AC:L/Au:N/C:N/I:N/A:P

CWEs:

CWE-121

Affected Software
References

Software	From	Fixed in
linux / linux_kernel	-	5.19
redhat / virtualization	4.0	4.0.x
redhat / enterprise_linux	8.0	8.0.x
redhat / enterprise_linux	9.0	9.0.x
debian / debian_linux	11.0	11.0.x

https://bugzilla.redhat.com/show_bug.cgi?id=2096178
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/nf_tables_api.c?id=fecf31ee395b0295f2d7260aa29946b7605f7c85
https://www.debian.org/security/2022/dsa-5161

Vulnerability Database

CVE-2022-2078

Deep Security Visibility Without the Complexity