CVE-2022-2652

🗓️ 04 Aug 2022 09:35:37Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 63 Views

Possible kernel stack memory leak and DoS due to crafted format strings in card label, v4l2loopback kernel module crash from many %s modifiers

Reporter	Title	Published	Views	Family All 24
Huntr	Format string modifiers in card label	28 Jul 202218:44	–	huntr
ATTACKERKB	CVE-2022-2652	4 Aug 202210:15	–	attackerkb
Circl	CVE-2022-2652	4 Aug 202214:19	–	circl
CNNVD	v4l2loopback 格式化字符串错误漏洞	4 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2652 Use of Externally-Controlled Format String in umlaeute/v4l2loopback	4 Aug 202209:35	–	cvelist
Debian CVE	CVE-2022-2652	4 Aug 202209:35	–	debiancve
EUVD	EUVD-2022-34898	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2652	4 Aug 202210:15	–	nvd
Tenable Nessus	openSUSE 15 Security Update : v4l2loopback (openSUSE-SU-2022:10159-1)	21 Oct 202200:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : v4l2loopback (openSUSE-SU-2022:10160-1)	21 Oct 202200:00	–	nessus

NVD

Node

v4l2loopback_project v4l2loopbackRange<0.12.6

[
  {
    "product": "umlaeute/v4l2loopback",
    "vendor": "umlaeute",
    "versions": [
      {
        "lessThan": "0.12.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/umlaeute/v4l2loopback/commit/e4cd225557486c420f6a34411f98c575effd43dd
huntr	www.huntr.dev/bounties/1b055da5-7a9e-4409-99d7-030280d242d5