Linux Kernel iproute2 ip/ipaddress.c ipaddr_link_get denial of service 🚫 [Falso Positivo]

Questo problema sembra essere un falso positivo. Verifichi le fonti citate e consideri di non utilizzare affatto questa voce.

Campo24/10/2022 13:4809/11/2022 14:3709/11/2022 14:42
vendorLinuxLinuxLinux
nameKernelKernelKernel
componentiproute2iproute2iproute2
fileip/ipaddress.cip/ipaddress.cip/ipaddress.c
functionipaddr_link_getipaddr_link_getipaddr_link_get
cwe401 (denial of service)401 (denial of service)401 (denial of service)
risk111
cvss3_vuldb_avLLL
cvss3_vuldb_acLLL
cvss3_vuldb_prHHH
cvss3_vuldb_uiNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cNNN
cvss3_vuldb_iNNN
cvss3_vuldb_aLLL
cvss3_vuldb_rlOOO
cvss3_vuldb_rcCCC
urlhttps://git.kernel.org/pub/scm/network/iproute2/iproute2-next.git/commit/?id=1d540336b026ed5bfe10eefac383db7f434d842fhttps://git.kernel.org/pub/scm/network/iproute2/iproute2-next.git/commit/?id=1d540336b026ed5bfe10eefac383db7f434d842fhttps://git.kernel.org/pub/scm/network/iproute2/iproute2-next.git/commit/?id=1d540336b026ed5bfe10eefac383db7f434d842f
namePatchPatchPatch
patch_urlhttps://git.kernel.org/pub/scm/network/iproute2/iproute2-next.git/commit/?id=1d540336b026ed5bfe10eefac383db7f434d842fhttps://git.kernel.org/pub/scm/network/iproute2/iproute2-next.git/commit/?id=1d540336b026ed5bfe10eefac383db7f434d842fhttps://git.kernel.org/pub/scm/network/iproute2/iproute2-next.git/commit/?id=1d540336b026ed5bfe10eefac383db7f434d842f
cveCVE-2022-3530CVE-2022-3530CVE-2022-3530
responsibleVulDBVulDBVulDB
date1665871200 (16/10/2022)1665871200 (16/10/2022)1665871200 (16/10/2022)
typeOperating SystemOperating SystemOperating System
cvss2_vuldb_avLLL
cvss2_vuldb_acLLL
cvss2_vuldb_ciNNN
cvss2_vuldb_iiNNN
cvss2_vuldb_aiPPP
cvss2_vuldb_rcCCC
cvss2_vuldb_rlOFOFOF
cvss2_vuldb_auMMM
cvss2_vuldb_eNDNDND
cvss3_vuldb_eXXX
cvss2_vuldb_basescore1.41.41.4
cvss2_vuldb_tempscore1.21.21.2
cvss3_vuldb_basescore2.32.32.3
cvss3_vuldb_tempscore2.22.22.2
cvss3_meta_basescore2.32.32.3
cvss3_meta_tempscore2.22.22.2
price_0day
disputed111
falsepositive111
cve_assigned1665871200 (16/10/2022)1665871200 (16/10/2022)
cve_nvd_summaryA vulnerability was found in Linux Kernel and classified as problematic. Affected by this issue is the function ipaddr_link_get of the file ip/ipaddress.c of the component iproute2. The manipulation leads to memory leak. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211028.

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Do you know our Splunk app?

Download it now for free!