Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2022-32296
HistoryJun 05, 2022 - 10:15 p.m.

CVE-2022-32296

2022-06-0522:15:08
CWE-330
mitre
web.nvd.nist.gov
147
9
cve
linux
kernel
tcp
servers
source ports
identification
security vulnerability

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

17.8%

JSON

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 (“Double-Hash Port Selection Algorithm”) of RFC 6056.

Affected configurations

Nvd
Node
linuxlinux_kernelRange<5.17.9
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Social References

More

Related

cbl_mariner 2
debiancve 1
nvd 1
cvelist 1
prion 1
ubuntucve 1
redhatcve 1
ibm 1
openvas 34
ubuntu 15
nessus 45
osv 17
suse 3
amazon 2
ics 3
debian 2
slackware 1
cbl_mariner
cbl_mariner
CVE-2022-32296 affecting package kernel for versions less than 5.15.48.1-2
2022-07-01 21:02:42
CVE-2022-32296 affecting package kernel 5.10.123.1-1
2022-08-12 16:45:24
debiancve
debiancve
CVE-2022-32296
2022-06-05 22:15:08
nvd
nvd
CVE-2022-32296
2022-06-05 22:15:08
cvelist
cvelist
CVE-2022-32296
2022-06-05 21:53:54
prion
prion
Double free
2022-06-05 22:15:00
ubuntucve
ubuntucve
CVE-2022-32296
2022-06-05 00:00:00
redhatcve
redhatcve
CVE-2022-32296
2022-06-14 14:30:03
ibm
ibm
Security Bulletin: Multiple Linux Kernel vulnerabilities may affect IBM Elastic Storage System
2022-12-13 13:33:54
openvas
openvas
Ubuntu: Security Advisory (USN-5630-1)
2022-09-23 00:00:00
Ubuntu: Security Advisory (USN-5622-1)
2022-09-22 00:00:00
Ubuntu: Security Advisory (USN-5660-1)
2022-10-06 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2022-09-21 00:00:00
Linux kernel (Azure CVM) vulnerabilities
2022-09-26 00:00:00
Linux kernel (GCP) vulnerabilities
2022-09-28 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5622-1)
2022-09-21 00:00:00
Ubuntu 18.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-5630-1)
2022-09-22 00:00:00
Ubuntu 18.04 LTS : Linux kernel (GCP) vulnerabilities (USN-5660-1)
2022-10-05 00:00:00
osv
osv
linux-gke vulnerabilities
2022-10-04 17:25:44
linux-raspi-5.4 vulnerabilities
2022-09-22 16:29:56
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi vulnerabilities
2022-09-21 09:25:51
suse
suse
Security update for the Linux Kernel (important)
2022-10-22 00:00:00
Security update for the Linux Kernel (important)
2022-11-02 00:00:00
Security update for the Linux Kernel (important)
2022-10-31 00:00:00
amazon
amazon
Important: kernel
2022-06-30 23:38:00
Important: kernel
2022-07-06 03:13:00
ics
ics
​Siemens SIMATIC MV500 Devices
2023-07-13 12:00:00
Siemens SCALANCE, RUGGEDCOM Third-Party
2023-03-16 12:00:00
Siemens SIMATIC S7-1500 TM MFP Linux Kernel
2023-06-15 12:00:00
debian
debian
[SECURITY] [DSA 5173-1] linux security update
2022-07-03 15:49:12
[SECURITY] [DLA 3065-1] linux security update
2022-07-01 11:40:50
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-08-26 04:17:47

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

17.8%

JSON
Related for CVE-2022-32296
cbl_mariner2debiancve1nvd1cvelist1prion1ubuntucve1redhatcve1ibm1openvas34ubuntu15nessus45osv17suse3amazon2ics3debian2slackware1