Lucene search

ROSA LABROSA-SA-2024-2342

HistoryFeb 14, 2024 - 10:35 a.m.

Advisory ROSA-SA-2024-2342

2024-02-1410:35:22

ROSA LAB

abf.rosalinux.ru

advisory

ostree

rosa-chrome

cve-2022-47085

denial of service

fixed

update

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

31.5%

JSON

software: ostree 2022.7
WASP: ROSA-CHROME

package_evr_string: ostree-2022.7-1.src.rpm

CVE-ID: CVE-2022-47085
BDU-ID: None
CVE-Crit: HIGH
CVE-DESC.: The issue detected in ostree allows attackers to cause a denial of service or other unspecified consequences using the print_panic function in repo_checkout_filter.rs.
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update ostree

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchostree< 2022.7UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ROSA	any	noarch	ostree	< 2022.7	UNKNOWN

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

31.5%

JSON

Related for ROSA-SA-2024-2342