Lucene search
HistoryMar 25, 2022 - 7:15 p.m.
CVE-2022-0435
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.013 Low
EPSS
Percentile
86.1%
A stack overflow flaw was found in the Linux kernel’s TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.
Affected configurations
Node
linuxlinux_kernelRange4.8–4.9.301
ORlinuxlinux_kernelRange4.10–4.14.266
ORlinuxlinux_kernelRange4.15–4.19.229
ORlinuxlinux_kernelRange4.20–5.4.179
ORlinuxlinux_kernelRange5.5–5.10.100
ORlinuxlinux_kernelRange5.11–5.15.23
ORlinuxlinux_kernelRange5.16–5.16.9
ORlinuxlinux_kernelMatch5.17-
ORlinuxlinux_kernelMatch5.17rc1
ORlinuxlinux_kernelMatch5.17rc2
ORlinuxlinux_kernelMatch5.17rc3
Node
redhatcodeready_linux_builderMatch8.0
ORredhatcodeready_linux_builderMatch8.4
ORredhatcodeready_linux_builder_eusMatch8.2
ORredhatcodeready_linux_builder_eus_for_power_little_endianMatch8.2
ORredhatcodeready_linux_builder_for_power_little_endian_eusMatch8.0
ORredhatcodeready_linux_builder_for_power_little_endian_eusMatch8.4
ORredhatenterprise_linuxMatch8.0
ORredhatenterprise_linux_eusMatch8.2
ORredhatenterprise_linux_eusMatch8.4
ORredhatenterprise_linux_for_ibm_z_systemsMatch8.0
ORredhatenterprise_linux_for_ibm_z_systems_eusMatch8.2
ORredhatenterprise_linux_for_ibm_z_systems_eusMatch8.4
ORredhatenterprise_linux_for_power_little_endianMatch8.0
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.2
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.4
ORredhatenterprise_linux_for_real_timeMatch8
ORredhatenterprise_linux_for_real_time_for_nfvMatch8
ORredhatenterprise_linux_for_real_time_for_nfv_tusMatch8.2
ORredhatenterprise_linux_for_real_time_for_nfv_tusMatch8.4
ORredhatenterprise_linux_for_real_time_tusMatch8.2
ORredhatenterprise_linux_for_real_time_tusMatch8.4
ORredhatenterprise_linux_server_ausMatch8.2
ORredhatenterprise_linux_server_ausMatch8.4
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.2
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.4
ORredhatenterprise_linux_server_tusMatch8.2
ORredhatenterprise_linux_server_tusMatch8.4
ORredhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.2
ORredhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.4
Node
redhatenterprise_linuxMatch8.0
redhatvirtualizationMatch4.0
ORredhatvirtualization_hostMatch4.0
Node
ovirtnodeMatch4.4.10
Node
fedoraprojectfedoraMatch34
ORfedoraprojectfedoraMatch35
Node
netapph300eMatch-
netapph300e_firmwareMatch-
Node
netapph300sMatch-
netapph300s_firmwareMatch-
Node
netapph410sMatch-
netapph410s_firmwareMatch-
Node
netapph500eMatch-
netapph500e_firmwareMatch-
Node
netapph500sMatch-
netapph500s_firmwareMatch-
Node
netapph700eMatch-
netapph700e_firmwareMatch-
Node
netapph700s_firmwareMatch-
netapph700sMatch-
Related
nessus
nessus
CBL Mariner 2.0 Security Update: kernel (CVE-2022-0435)
2023-03-20 00:00:00
RHEL 8 : kpatch-patch (RHSA-2022:1619)
2022-04-28 00:00:00
RHEL 8 : kernel (RHSA-2022:1589)
2022-04-27 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-0435 affecting package kernel for versions less than 5.15.37.1-2
2022-06-03 17:54:27
CVE-2022-0435 affecting package kernel 5.10.109.1-2
2022-05-12 02:17:02
ubuntucve
ubuntucve
CVE-2022-0435
2022-02-10 00:00:00
CVE-2022-48711
2024-06-20 00:00:00
cve
cve
CVE-2022-0435
2022-03-25 19:15:10
CVE-2022-48711
2024-06-20 11:15:54
cvelist
cvelist
CVE-2022-0435
2022-03-25 00:00:00
CVE-2022-48711 tipc: improve size validations for received domain records
2024-06-20 11:13:06
veracode
veracode
Denial Of Service (DoS)
2022-03-26 18:15:22
redhat
redhat
(RHSA-2022:1186) Important: kpatch-patch security update
2022-04-05 08:02:16
(RHSA-2022:1619) Important: kpatch-patch security update
2022-04-27 07:22:43
(RHSA-2022:1589) Important: kernel security update
2022-04-26 13:56:00
debiancve
debiancve
CVE-2022-0435
2022-03-25 19:15:10
CVE-2022-48711
2024-06-20 11:15:54
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Linux Linux Kernel
2023-04-20 17:29:02
redhatcve
redhatcve
CVE-2022-0435
2022-02-10 15:52:24
CVE-2022-48711
2024-06-20 12:26:49
prion
prion
Stack overflow
2022-03-25 19:15:00
cnvd
cnvd
Linux kernel buffer overflow vulnerability (CNVD-2022-68616)
2022-02-14 00:00:00
nvd
nvd
CVE-2022-48711
2024-06-20 11:15:54
openvas
openvas
Fedora: Security Advisory for kernel (FEDORA-2022-6f887c7be7)
2022-02-17 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2022-df17aabb12)
2022-02-17 00:00:00
Mageia: Security Advisory (MGASA-2022-0062)
2022-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: kernel-5.16.9-200.fc35
2022-02-17 03:16:11
[SECURITY] Fedora 34 Update: kernel-5.16.9-100.fc34
2022-02-17 03:07:22
photon
photon
Critical Photon OS Security Update - PHSA-2022-0152
2022-02-11 00:00:00
Critical Photon OS Security Update - PHSA-2022-4.0-0152
2022-02-11 00:00:00
Important Photon OS Security Update - PHSA-2022-0440
2022-02-07 00:00:00
vulnrichment
vulnrichment
CVE-2022-48711 tipc: improve size validations for received domain records
2024-06-20 11:13:06
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-02-15 23:50:31
Updated kernel-linus packages fix security vulnerabilities
2022-02-15 23:50:31
rocky
rocky
kernel-rt security and bug fix update
2022-03-11 02:24:05
kernel security, bug fix, and enhancement update
2022-03-11 02:26:54
kernel-rt security and bug fix update
2022-03-10 14:37:54
cloudfoundry
cloudfoundry
USN-5339-1: Linux kernel vulnerabilities | Cloud Foundry
2022-05-23 00:00:00
USN-5338-1: Linux kernel vulnerabilities | Cloud Foundry
2022-04-14 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2022-03-22 00:00:00
Linux kernel (OEM) vulnerabilities
2022-02-22 00:00:00
Linux kernel vulnerabilities
2022-03-22 00:00:00
osv
osv
linux-oem-5.14 vulnerabilities
2022-02-22 22:45:56
Important: kernel-rt security and bug fix update
2022-03-10 14:37:54
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-03-09 04:16:04
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2022-03-10 14:43:03
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2022-03-11 00:00:00
Unbreakable Enterprise kernel-container security update
2022-03-23 00:00:00
Unbreakable Enterprise kernel security update
2022-03-23 00:00:00
debian
debian
[SECURITY] [DSA 5092-1] linux security update
2022-03-07 12:54:12
[SECURITY] [DLA 2940-1] linux security update
2022-03-09 12:40:13
[SECURITY] [DLA 2941-1] linux-4.19 security update
2022-03-09 12:40:55
suse
suse
Security update for the Linux Kernel (critical)
2022-02-11 00:00:00
Security update for the Linux Kernel (critical)
2022-02-10 00:00:00
Security update for the Linux Kernel (critical)
2022-02-10 00:00:00
amazon
amazon
Important: kernel
2022-03-07 23:19:00
Important: kernel
2022-03-07 23:32:00
redos
redos
ROS-20220919-01
2022-09-19 00:00:00
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.013 Low
EPSS
Percentile
86.1%
Related for NVD:CVE-2022-0435