CVE-2022-27666

🗓️ 23 Mar 2022 05:07:01Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 468 Views

A heap buffer overflow flaw in IPsec ESP transformation code

Reporter	Title	Published	Views	Family All 493
GithubExploit	Exploit for Out-of-bounds Write in Linux Linux_Kernel	23 Mar 202222:54	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Netapp C400_Firmware	3 Feb 202622:28	–	githubexploit
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	29 Aug 202211:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, Golang Go, and cURL libcurl may affect IBM Spectrum Protect Plus	13 Dec 202219:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel and OpenSSL may affect IBM Spectrum Copy Data Management	17 Sep 202201:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to elevated privileges in Linux Kernel (CVE-2022-27666).	12 Jan 202321:59	–	ibm
ICS	Russian Military Cyber Actors Target US and Global Critical Infrastructure	5 Sep 202412:00	–	ics
ATTACKERKB	CVE-2022-27666	23 Mar 202206:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2-2022-1774 (ALAS-2022-1774)	19 Apr 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-012 (ALASKERNEL-5.10-2022-012)	2 May 202200:00	–	nessus

NVD

Node

OR

linux linux_kernelRange4.11–4.14.274

linux linux_kernelRange4.15–4.19.237

linux linux_kernelRange4.20–5.4.188

linux linux_kernelRange5.5–5.10.108

linux linux_kernelRange5.11–5.15.29

linux linux_kernelRange5.16–5.16.15

linux linux_kernelMatch5.17rc1

linux linux_kernelMatch5.17rc2

linux linux_kernelMatch5.17rc3

linux linux_kernelMatch5.17rc4

linux linux_kernelMatch5.17rc5

linux linux_kernelMatch5.17rc6

linux linux_kernelMatch5.17rc7

Node

OR

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

Node

OR

redhat virtualizationMatch4.0

redhat enterprise_linuxMatch8.0

Node

AND

netapp h300s_firmwareMatch-

netapp h300sMatch-

Node

AND

netapp h500s_firmwareMatch-

netapp h500sMatch-

Node

AND

netapp h700s_firmwareMatch-

netapp h700sMatch-

Node

AND

netapp h300e_firmwareMatch-

netapp h300eMatch-

Node

AND

netapp h500e_firmwareMatch-

netapp h500eMatch-

Node

AND

netapp h700e_firmwareMatch-

netapp h700eMatch-

Node

AND

netapp h410s_firmwareMatch-

netapp h410sMatch-

Node

AND

netapp h410c_firmwareMatch-

netapp h410cMatch-

Node

OR

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Source	Link
debian	www.debian.org/security/2022/dsa-5127
github	www.github.com/torvalds/linux/commit/ebe48d368e97d007bfeb76fcb065d6cfc4c96645
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.netapp.com/advisory/ntap-20220429-0001/
debian	www.debian.org/security/2022/dsa-5173

01 Sep 2026 18:05Current

8High risk

Vulners AI Score8

CVSS 24.6

CVSS 3.17.8

EPSS0.05524

heap buffer overflow ipsec esp transformation cve-2022-27666 nvd