CVE-2022-0500

EPSS 0.36%
Veröffentlicht 25.03.2022 19:15:10
Zuletzt bearbeitet 21.11.2024 06:38:47
Erkennungen
Login

A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 12

NVD 12 VulnDex Vulnerability Enrichment 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version >= 5.10 < 5.15.37

Linux ≫ Linux Kernel Version >= 5.16 < 5.16.11

Fedoraproject ≫ Fedora Version 34

Fedoraproject ≫ Fedora Version 35

Netapp ≫ H300e Firmware Version -

Netapp ≫ H300e Version -

Netapp ≫ H300s Firmware Version -

Netapp ≫ H300s Version -

Netapp ≫ H410c Firmware Version -

Netapp ≫ H410c Version -

Netapp ≫ H410s Firmware Version -

Netapp ≫ H410s Version -

Netapp ≫ H500e Firmware Version -

Netapp ≫ H500e Version -

Netapp ≫ H500s Firmware Version -

Netapp ≫ H500s Version -

Netapp ≫ H700e Firmware Version -

Netapp ≫ H700e Version -

Netapp ≫ H700s Firmware Version -

Netapp ≫ H700s Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.36%	0.28

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://bugzilla.redhat.com/show_bug.cgi?id=2044578

Third Party Advisory

Issue Tracking

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=20b2aff4bc15bda809f994761d5719827d66c0b4

Patch

Vendor Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=216e3cd2f28dbbf1fe86848e0e29e6693b9f0a20

Patch

Vendor Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=34d3a78c681e8e7844b43d1a2f4671a04249c821

Patch

Vendor Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3c4807322660d4290ac9062c034aed6b87243861

Patch

Vendor Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=48946bd6a5d695c50b34546864b79c1f910a33c1

Patch

Vendor Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c25b2ae136039ffa820c26138ed4a5e5f3ab3841

Patch

Vendor Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cf9f2f8d62eca810afbd1ee6cc0800202b000e57

Patch

Vendor Advisory

https://security.netapp.com/advisory/ntap-20220519-0001/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-0500

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-0500

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-0500

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-0500