PT-2022-1992 · Linux +10 · Linux Kernel +10

🗓️ 07 Mar 2022 00:00:00Reported by Positive TechnologiesType

Heap overflow in Linux IPsec ESP leads to local privilege escalation via modprobe path overwrite.

Reporter	Title	Published	Views	Family All 20034
CNNVD	Linux kernel 安全漏洞	8 Sep 202100:00	–	cnnvd
CNNVD	Linux kernel 竞争条件问题漏洞	14 Sep 202100:00	–	cnnvd
CNNVD	Linux kernel 缓冲区错误漏洞	4 Oct 202100:00	–	cnnvd
CNNVD	Linux kernel 缓冲区错误漏洞	20 Oct 202100:00	–	cnnvd
CNNVD	Linux kernel 缓冲区错误漏洞	21 Oct 202100:00	–	cnnvd
CNNVD	Linux kernel 资源管理错误漏洞	26 Oct 202100:00	–	cnnvd
CNNVD	Linux kernel 资源管理错误漏洞	28 Oct 202100:00	–	cnnvd
CNNVD	Linux kernel 安全漏洞	11 Oct 202100:00	–	cnnvd
CNNVD	Linux kernel 安全漏洞	12 Oct 202100:00	–	cnnvd
CNNVD	Linux kernel 安全漏洞	13 Oct 202100:00	–	cnnvd

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

09 Sep 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.8 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC