Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-4639
HistoryDec 21, 2022 - 12:00 a.m.

CVE-2022-4639

2022-12-2100:00:00
ubuntu.com
ubuntu.com
20
sslh
hexdump
packet dumping handler
format string
vulnerability
patch
unix

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

59.4%

A vulnerability, which was classified as critical, has been found in sslh.
This issue affects the function hexdump of the file probe.c of the
component Packet Dumping Handler. The manipulation of the argument msg_info
leads to format string. The attack may be initiated remotely. The name of
the patch is b19f8a6046b080e4c2e28354a58556bb26040c6f. It is recommended to
apply a patch to fix this issue. The identifier VDB-216497 was assigned to
this vulnerability.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

59.4%

Related for UB:CVE-2022-4639