Lucene search

K
cve[email protected]CVE-2022-46770
HistoryDec 07, 2022 - 8:15 p.m.

CVE-2022-46770

2022-12-0720:15:11
CWE-835
web.nvd.nist.gov
25
cve-2022-46770
qubes-mirage-firewall
qubesos
dos
cpu consumption
udp
multicast
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.415 Medium

EPSS

Percentile

97.3%

qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255).

Affected configurations

NVD
Node
linuxfoundationmirage_firewallRange0.8.00.8.4qubesos

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.415 Medium

EPSS

Percentile

97.3%