Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-44940
HistoryDec 19, 2022 - 12:00 a.m.

CVE-2022-44940

2022-12-1900:00:00
ubuntu.com
ubuntu.com
21
patchelf
out-of-bounds read
modifyrpath
unix
backport

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS

0.002

Percentile

61.2%

Patchelf v0.9 was discovered to contain an out-of-bounds read via the
function modifyRPath at src/patchelf.cc.

Bugs

Notes

Author Note
eslerm version 0.10 and earlier require extensive backport

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS

0.002

Percentile

61.2%