Veracode Vulnerability DatabaseVERACODE:37005Denial Of Service (DoS)
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
3.6 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:N/A:P
0.0004 Low
EPSS
Percentile
5.7%
kernal is vulnerable to denial of service.The vulnerability exists due to memory leak and application crash in pfkey_register function in af_key.c, which allows an attacker to crash the application by providing a malicious input.
References
access.redhat.com/errata/RHSA-2022:6243
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=2066819
github.com/torvalds/linux/commit/9a564bccb78a76740ea9d75a259942df8143d02c
lists.debian.org/debian-lts-announce/2022/07/msg00000.html
security.netapp.com/advisory/ntap-20220629-0001/
www.debian.org/security/2022/dsa-5127
www.debian.org/security/2022/dsa-5173
Related
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
3.6 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:N/A:P
0.0004 Low
EPSS
Percentile
5.7%