Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2022-2663
HistorySep 01, 2022 - 12:00 a.m.

CVE-2022-2663

2022-09-0100:00:00
ubuntu.com
ubuntu.com
43

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

58.3%

JSON

An issue was found in the Linux kernel in nf_conntrack_irc where the
message handling can be confused and incorrectly matches the message. A
firewall may be able to be bypassed when users are using unencrypted IRC
with nf_conntrack_irc configured.

Notes

Author Note
rodrigo-zaiden USN-5975-1 first publication included esm/xenial linux-gcp version 4.15.0-1146.162~16.04.1 by mistake, please refer to USN-6007-1.
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-204.215UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-136.153UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-57.63UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-28.29UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-239.273) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1150.163UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1093.101UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1027.31UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1016.17UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1117.123) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
Rows per page:
1-10 of 811

References

Related

veracode 1
prion 1
debiancve 1
redhatcve 1
cve 1
nessus 67
openvas 51
osv 23
oraclelinux 4
ubuntu 20
virtuozzo 2
amazon 3
mageia 2
suse 6
debian 3
ibm 2
photon 2
almalinux 4
redhat 4
slackware 1
veracode
veracode
Authentication Bypass
2023-01-17 19:15:52
prion
prion
Design/Logic Flaw
2022-09-01 21:15:00
debiancve
debiancve
CVE-2022-2663
2022-09-01 21:15:00
redhatcve
redhatcve
CVE-2022-2663
2022-08-31 19:59:16
cve
cve
CVE-2022-2663
2022-09-01 21:15:00
nessus
nessus
SUSE SLES12 Security Update : kernel (SUSE-SU-2022:3586-1)
2022-10-18 00:00:00
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-10108)
2023-09-07 00:00:00
Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6247-1)
2023-07-26 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6247-1)
2023-07-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3586-1)
2022-10-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3587-1)
2022-10-17 00:00:00
osv
osv
linux-oem-5.17 vulnerabilities
2023-07-25 21:49:46
linux-azure-4.15 vulnerabilities
2023-02-10 14:08:25
linux-bluefield vulnerabilities
2023-01-19 20:07:11
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2023-01-03 00:00:00
Unbreakable Enterprise kernel security update
2022-12-06 00:00:00
kernel security, bug fix, and enhancement update
2023-05-23 00:00:00
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2023-07-25 00:00:00
Linux kernel (Azure) vulnerabilities
2023-02-10 00:00:00
Linux kernel vulnerabilities
2023-01-06 00:00:00
virtuozzo
virtuozzo
[Important] [Security] Virtuozzo ReadyKernel Patch 155.1 for Virtuozzo Hybrid Server 7.5
2023-03-27 00:00:00
[Important] [Security] Virtuozzo ReadyKernel Patch 161.0 for Virtuozzo Hybrid Server 7.5
2023-09-20 00:00:00
amazon
amazon
Important: kernel
2022-09-30 07:04:00
Important: kernel
2022-09-30 07:04:00
Important: kernel
2022-09-30 02:41:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-10-23 23:35:49
Updated kernel-linus packages fix security vulnerabilities
2022-10-23 23:35:49
suse
suse
Security update for the Linux Kernel (important)
2022-09-14 00:00:00
Security update for the Linux Kernel (important)
2022-09-27 00:00:00
Security update for the Linux Kernel (important)
2022-09-16 00:00:00
debian
debian
[SECURITY] [DSA 5257-1] linux security update
2022-10-18 21:06:43
[SECURITY] [DLA 3131-1] linux security update
2022-10-02 16:44:48
[SECURITY] [DLA 3173-1] linux-5.10 security update
2022-11-01 20:57:30
ibm
ibm
Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management
2023-07-28 15:34:05
Security Bulletin: Vulnerabilities in Linux kernel, libssh, and Java can affect IBM Spectrum Protect Plus
2023-08-22 14:18:43
photon
photon
Important Photon OS Security Update - PHSA-2022-4.0-0275
2022-11-04 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0477
2022-10-26 00:00:00
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2023-05-16 00:00:00
Important: kernel-rt security and bug fix update
2023-05-16 00:00:00
Important: kernel security, bug fix, and enhancement update
2023-05-09 00:00:00
redhat
redhat
(RHSA-2023:2736) Important: kernel-rt security and bug fix update
2023-05-16 05:53:24
(RHSA-2023:2951) Important: kernel security, bug fix, and enhancement update
2023-05-16 05:59:02
(RHSA-2023:2148) Important: kernel-rt security and bug fix update
2023-05-09 05:01:55
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-11-29 21:04:28

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

58.3%

JSON
Related for UB:CVE-2022-2663
veracode1prion1debiancve1redhatcve1cve1nessus67openvas51osv23oraclelinux4ubuntu20virtuozzo2amazon3mageia2suse6debian3ibm2photon2almalinux4redhat4slackware1