2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2022-2639" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2022-09-01T21:15:09.600" ,
2023-06-27 22:00:31 +00:00
"lastModified" : "2023-06-27T20:52:02.907" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Analyzed" ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system."
} ,
{
"lang" : "es" ,
"value" : "Se ha encontrado un error de coerci\u00f3n de enteros en el m\u00f3dulo del kernel openvswitch. Dado un n\u00famero suficientemente grande de acciones, mientras ses copiado y es reservada memoria para una nueva acci\u00f3n de un nuevo flujo, la funci\u00f3n reserve_sfa_size() no devuelve -EMSGSIZE como es esperado, conllevando potencialmente a un acceso de escritura fuera de l\u00edmites. Este fallo permite a un usuario local bloquearse o potencialmente escalar sus privilegios en el sistema"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.9
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
2023-06-27 22:00:31 +00:00
"value" : "CWE-681"
2023-04-24 12:24:31 +02:00
}
]
} ,
{
"source" : "secalert@redhat.com" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-192"
} ,
{
"lang" : "en" ,
"value" : "CWE-787"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "3.18.139" ,
"versionEndExcluding" : "3.19" ,
"matchCriteriaId" : "00ECE319-2D3D-436D-9AE0-E83440DA1972"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.4.179" ,
"versionEndExcluding" : "4.5" ,
"matchCriteriaId" : "93408D6A-A152-414B-9F27-4CF1E0D3C9A5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.9.169" ,
"versionEndExcluding" : "4.9.312" ,
"matchCriteriaId" : "048C90D6-63DC-47D5-A9F7-9FED6D0A06DC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.14.112" ,
"versionEndExcluding" : "4.14.277" ,
"matchCriteriaId" : "C27466CC-35AC-465C-9EEC-5F451E1B38A2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.19.35" ,
"versionEndExcluding" : "4.19.240" ,
"matchCriteriaId" : "567BAF59-C306-43ED-9997-EA973F2B811A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.0.8" ,
"versionEndExcluding" : "5.4.191" ,
"matchCriteriaId" : "550A7DCC-5944-4B55-8AAA-F4E53AC1F825"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.5" ,
"versionEndExcluding" : "5.10.113" ,
"matchCriteriaId" : "3AE702C9-4FF9-4ADB-A885-74A6BAB430C1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.11" ,
"versionEndExcluding" : "5.15.36" ,
"matchCriteriaId" : "8F146BAE-AA87-4430-8438-C3554714F30E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.16" ,
"versionEndExcluding" : "5.17.5" ,
"matchCriteriaId" : "31F42CF8-1960-440A-951C-1851EBFDC481"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2084479" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Issue Tracking" ,
"Patch" ,
"Third Party Advisory"
]
} ,
{
"url" : "https://github.com/torvalds/linux/commit/cefa91b2332d7009bc0be5d951d6cbbf349f90f8" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Exploit" ,
"Patch" ,
"Third Party Advisory"
]
}
]
}
