Lucene search

K
nvd[email protected]NVD:CVE-2022-4337
HistoryJan 10, 2023 - 10:15 p.m.

CVE-2022-4337

2023-01-1022:15:13
CWE-125
web.nvd.nist.gov

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.1%

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.

Affected configurations

NVD
Node
openvswitchopenvswitchRange<2.13.10
OR
openvswitchopenvswitchRange2.14.02.14.8
OR
openvswitchopenvswitchRange2.15.02.15.7
OR
openvswitchopenvswitchRange2.16.02.16.6
OR
openvswitchopenvswitchRange2.17.02.17.5
OR
openvswitchopenvswitchRange3.0.03.0.3
Node
debiandebian_linuxMatch11.0

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.1%