Linux Kernel BPF net/unix/af_unix.c unix_sock_destructor/unix_release_sock 拒绝服务

分类为棘手的漏洞已在Linux Kernel中发现。此漏洞会影响功能 unix_sock_destructor/unix_release_sock文件net/unix/af_unix.c的组件BPF。手动调试的不合法输入可导致拒绝服务。漏洞的CWE定义是 CWE-401。此漏洞的脆弱性 2022-10-17所提交。阅读公告的网址是git.kernel.org。该漏洞被标识为CVE-2022-3543，成功的攻击必须要先进入局域网。有技术细节可用。没有可利用漏洞。当前漏洞利用的价值为美元大约是$0-$5k 。它被宣布为未定义。我们估计的零日攻击价值约为$0-$5k。错误修复程序下载地址为git.kernel.org，建议采用一个补丁来修正此问题。该漏洞被披露后，此前未曾发表过可能的缓解措施。

时间轴

用户

1	37

字段

vulnerability_cvss3_meta_tempscore	2
vulnerability_cvss3_meta_basescore	2
vulnerability_cvss3_cna_basescore	1
vulnerability_cvss3_nvd_basescore	1
source_cve_cna	1

Commit Conf

90%	31
70%	19
50%	14

Approve Conf

90%	31
70%	19
80%	14

ID	已提交	用户	字段	更改	备注	已接受	地位	C
13232923	2022-11-09	VulD...	cvss3_cna_basescore	3.5	see CVSS documentation	2022-11-09	已接受	90
13232922	2022-11-09	VulD...	cvss3_nvd_basescore	5.5	nist.gov	2022-11-09	已接受	90
13232921	2022-11-09	VulD...	cvss3_meta_tempscore	4.1	see CVSS documentation	2022-11-09	已接受	90
13232920	2022-11-09	VulD...	cvss3_meta_basescore	4.2	see CVSS documentation	2022-11-09	已接受	90
13232919	2022-11-09	VulD...	cve_cna	VulDB	nvd.nist.gov	2022-11-09	已接受	70
13232918	2022-11-09	VulD...	cvss3_cna_a	L	nvd.nist.gov	2022-11-09	已接受	70
13232917	2022-11-09	VulD...	cvss3_cna_i	N	nvd.nist.gov	2022-11-09	已接受	70
13232916	2022-11-09	VulD...	cvss3_cna_c	N	nvd.nist.gov	2022-11-09	已接受	70
13232915	2022-11-09	VulD...	cvss3_cna_s	U	nvd.nist.gov	2022-11-09	已接受	70
13232914	2022-11-09	VulD...	cvss3_cna_ui	N	nvd.nist.gov	2022-11-09	已接受	70
13232913	2022-11-09	VulD...	cvss3_cna_pr	L	nvd.nist.gov	2022-11-09	已接受	70
13232912	2022-11-09	VulD...	cvss3_cna_ac	L	nvd.nist.gov	2022-11-09	已接受	70
13232911	2022-11-09	VulD...	cvss3_cna_av	A	nvd.nist.gov	2022-11-09	已接受	70
13232910	2022-11-09	VulD...	cvss3_nvd_a	H	nvd.nist.gov	2022-11-09	已接受	70
13232909	2022-11-09	VulD...	cvss3_nvd_i	N	nvd.nist.gov	2022-11-09	已接受	70
13232908	2022-11-09	VulD...	cvss3_nvd_c	N	nvd.nist.gov	2022-11-09	已接受	70
13232907	2022-11-09	VulD...	cvss3_nvd_s	U	nvd.nist.gov	2022-11-09	已接受	70
13232906	2022-11-09	VulD...	cvss3_nvd_ui	N	nvd.nist.gov	2022-11-09	已接受	70
13232905	2022-11-09	VulD...	cvss3_nvd_pr	L	nvd.nist.gov	2022-11-09	已接受	70
13232904	2022-11-09	VulD...	cvss3_nvd_ac	L	nvd.nist.gov	2022-11-09	已接受	70

Linux Kernel BPF net/unix/af_unix.c unix_sock_destructor/unix_release_sock 拒绝服务

时间轴

用户

字段

Commit Conf

Approve Conf

🔒 Login Required

Are you interested in using VulDB?