Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-2663HistorySep 01, 2022 - 9:15 p.m.
CVE-2022-2663
2022-09-0121:15:09
Debian Security Bug Tracker
security-tracker.debian.org
28
linux kernel
nf_conntrack_irc
message handling
firewall
unencrypted irc
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
0.002 Low
EPSS
Percentile
58.9%
An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 6.0.2-1 | linux_6.0.2-1_all.deb |
| Debian | 11 | all | linux | < 5.10.149-1 | linux_5.10.149-1_all.deb |
| Debian | 999 | all | linux | < 6.0.2-1 | linux_6.0.2-1_all.deb |
| Debian | 13 | all | linux | < 6.0.2-1 | linux_6.0.2-1_all.deb |
Related
prion
prion
Design/Logic Flaw
2022-09-01 21:15:00
redhatcve
redhatcve
CVE-2022-2663
2022-08-31 19:59:16
nvd
nvd
CVE-2022-2663
2022-09-01 21:15:09
cve
cve
CVE-2022-2663
2022-09-01 21:15:09
cvelist
cvelist
CVE-2022-2663
2022-09-01 00:00:00
ubuntucve
ubuntucve
CVE-2022-2663
2022-09-01 00:00:00
veracode
veracode
Authentication Bypass
2023-01-17 19:15:52
nessus
nessus
SUSE SLES12 Security Update : kernel (SUSE-SU-2022:3586-1)
2022-10-18 00:00:00
Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6247-1)
2023-07-26 00:00:00
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-10108)
2023-09-07 00:00:00
osv
osv
linux-oem-5.17 vulnerabilities
2023-07-25 21:49:46
linux-azure vulnerabilities
2023-01-09 20:51:27
linux-bluefield vulnerabilities
2023-01-19 20:07:11
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2023-01-03 00:00:00
Unbreakable Enterprise kernel security update
2022-12-06 00:00:00
kernel security, bug fix, and enhancement update
2023-05-23 00:00:00
virtuozzo
virtuozzo
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:3586-1)
2022-10-17 00:00:00
Ubuntu: Security Advisory (USN-6247-1)
2023-07-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3587-1)
2022-10-17 00:00:00
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2023-07-25 00:00:00
Linux kernel vulnerabilities
2023-02-09 00:00:00
Linux kernel (Qualcomm Snapdragon) vulnerabilities
2023-02-09 00:00:00
amazon
amazon
Important: kernel
2022-09-30 07:04:00
Important: kernel
2022-09-30 07:04:00
Important: kernel
2022-09-30 02:41:00
suse
suse
Security update for the Linux Kernel (important)
2022-09-14 00:00:00
Security update for the Linux Kernel (important)
2022-09-27 00:00:00
Security update for the Linux Kernel (important)
2022-09-16 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-10-23 23:35:49
Updated kernel-linus packages fix security vulnerabilities
2022-10-23 23:35:49
debian
debian
[SECURITY] [DSA 5257-1] linux security update
2022-10-18 21:06:43
[SECURITY] [DLA 3131-1] linux security update
2022-10-02 16:44:48
[SECURITY] [DLA 3173-1] linux-5.10 security update
2022-11-01 20:57:30
ibm
ibm
photon
photon
Important Photon OS Security Update - PHSA-2022-4.0-0275
2022-11-04 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0477
2022-10-26 00:00:00
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2023-05-16 00:00:00
Important: kernel-rt security and bug fix update
2023-05-16 00:00:00
Important: kernel-rt security and bug fix update
2023-05-09 00:00:00
redhat
redhat
(RHSA-2023:2951) Important: kernel security, bug fix, and enhancement update
2023-05-16 05:59:02
(RHSA-2023:2736) Important: kernel-rt security and bug fix update
2023-05-16 05:53:24
(RHSA-2023:2148) Important: kernel-rt security and bug fix update
2023-05-09 05:01:55
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
0.002 Low
EPSS
Percentile
58.9%
Related for DEBIANCVE:CVE-2022-2663