Lucene search

K
ubuntuUbuntuUSN-5634-1
HistorySep 22, 2022 - 12:00 a.m.

Linux kernel (OEM) vulnerability

2022-09-2200:00:00
ubuntu.com
58
linux kernel
ubuntu 22.04 lts
oem systems
netfilter subsystem
denial of service
system crash

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.6

Confidence

High

EPSS

0.009

Percentile

82.8%

Releases

  • Ubuntu 22.04 LTS

Packages

  • linux-oem-5.17 - Linux kernel for OEM systems

Details

Domingo Dirutigliano and Nicola Guerrera discovered that the netfilter
subsystem in the Linux kernel did not properly handle rules that truncated
packets below the packet header size. When such rules are in place, a
remote attacker could possibly use this to cause a denial of service
(system crash).

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.6

Confidence

High

EPSS

0.009

Percentile

82.8%