Lucene search

[email protected]CVE-2022-3545

HistoryOct 17, 2022 - 12:15 p.m.

CVE-2022-3545

2022-10-1712:15:11

CWE-119

[email protected]

web.nvd.nist.gov

155

vulnerability

cve-2022-3545

linux kernel

ipsec

use after free

critical

patch

nvd

vdb-211045

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.4%

JSON

A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.

Affected configurations

NVD

Node

linuxlinux_kernelRange4.11–4.14.303

linuxlinux_kernelRange4.15–4.19.270

linuxlinux_kernelRange4.20–5.4.228

linuxlinux_kernelRange5.5–5.10.160

linuxlinux_kernelRange5.11–5.15.84

Node

netapph410cMatch-

AND

netapph410c_firmwareMatch-

Node

netapph300sMatch-

AND

netapph300s_firmwareMatch-

Node

netapph500sMatch-

AND

netapph500s_firmwareMatch-

Node

netapph700sMatch-

AND

netapph700s_firmwareMatch-

Node

netapph410sMatch-

AND

netapph410s_firmwareMatch-

Node

debiandebian_linuxMatch10.0

debiandebian_linuxMatch11.0

CPENameOperatorVersion
linux:linux_kernellinux linux kernellt4.14.303
linux:linux_kernellinux linux kernellt4.19.270
linux:linux_kernellinux linux kernellt5.4.228
linux:linux_kernellinux linux kernellt5.10.160
linux:linux_kernellinux linux kernellt5.15.84

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	lt	4.14.303
linux:linux_kernel	linux linux kernel	lt	4.19.270
linux:linux_kernel	linux linux kernel	lt	5.4.228
linux:linux_kernel	linux linux kernel	lt	5.10.160
linux:linux_kernel	linux linux kernel	lt	5.15.84

CNA Affected

[
  {
    "vendor": "Linux",
    "product": "Kernel",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]