CVE-2022-2663: falha em Linux kernel
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.1%
An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured.
Produtos afetados
n/a · Linux kernelReferências
https://cert-portal.siemens.com/productcert/html/ssa-769027.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-794697.htmlhttps://dgl.cx/2022/08/nat-again-irc-cve-2022-2663https://lists.debian.org/debian-lts-announce/2022/10/msg00000.htmlhttps://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlhttps://lore.kernel.org/netfilter-devel/20220826045658.100360-1-dgl%40dgl.cx/T/https://www.debian.org/security/2022/dsa-5257https://www.openwall.com/lists/oss-security/2022/08/30/1https://www.youtube.com/watch?v=WIq-YgQuYCA