Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-0322
HistoryMar 25, 2022 - 12:00 a.m.

CVE-2022-0322

2022-03-2500:00:00
ubuntu.com
ubuntu.com
50
sctp network protocol
linux kernel
denial of service

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

9.7%

A flaw was found in the sctp_make_strreset_req function in
net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel
with a local user privilege access. In this flaw, an attempt to use more
buffer than is allocated triggers a BUG_ON issue, leading to a denial of
service (DOS).

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-166.174UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-92.103UNKNOWN
ubuntu21.10noarchlinux< 5.13.0-23.23UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1118.125UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1061.64UNKNOWN
ubuntu21.10noarchlinux-aws< 5.13.0-1008.9UNKNOWN
ubuntu20.04noarchlinux-aws-5.11< 5.11.0-1023.24~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1061.64~18.04.1UNKNOWN
ubuntu16.04noarchlinux-aws-hwe< 4.15.0-1118.125~16.04.1UNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1065.68UNKNOWN
Rows per page:
1-10 of 531

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

9.7%