7.8
CVE-2022-27666
- EPSS 5.52%
- Veröffentlicht 23.03.2022 06:15:06
- Zuletzt bearbeitet 01.09.2026 18:05:14
- Erkennungen
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.11 < 4.14.274
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.237
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.188
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.108
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.29
Linux ≫ Linux Kernel Version >= 5.16 < 5.16.15
Linux ≫ Linux Kernel Version 5.17 Update rc1
Linux ≫ Linux Kernel Version 5.17 Update rc2
Linux ≫ Linux Kernel Version 5.17 Update rc3
Linux ≫ Linux Kernel Version 5.17 Update rc4
Linux ≫ Linux Kernel Version 5.17 Update rc5
Linux ≫ Linux Kernel Version 5.17 Update rc6
Linux ≫ Linux Kernel Version 5.17 Update rc7
Fedoraproject ≫ Fedora Version 34
Fedoraproject ≫ Fedora Version 35
Redhat ≫ Virtualization Version 4.0
Redhat ≫ Enterprise Linux Version 8.0
Netapp ≫ H300s Firmware Version -
Netapp ≫ H500s Firmware Version -
Netapp ≫ H700s Firmware Version -
Netapp ≫ H300e Firmware Version -
Netapp ≫ H500e Firmware Version -
Netapp ≫ H700e Firmware Version -
Netapp ≫ H410s Firmware Version -
Netapp ≫ H410c Firmware Version -
Debian ≫ Debian Linux Version 9.0
Debian ≫ Debian Linux Version 10.0
Debian ≫ Debian Linux Version 11.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 5.52% | 0.918 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://www.debian.org/security/2022/dsa-5127
https://www.debian.org/security/2022/dsa-5173
https://bugzilla.redhat.com/show_bug.cgi?id=2061633
https://github.com/torvalds/linux/commit/ebe48d368e97d007bfeb76fcb065d6cfc4c96645
https://security.netapp.com/advisory/ntap-20220429-0001/