Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33701
HistoryJan 15, 2022 - 12:38 a.m.

Remote Code Execution (RCE)

2022-01-1500:38:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

linux is vulnerable to remote code execution. The vulnerability exist due to an out of bounds memory access and a lack of sanitization handling of eBPF programs allowing an attacker to inject maliciously crafted code into the system.

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H