CVE-2022-0435
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - secalert@redhat.com
- Published
- 2022-03-25
- Last modified
- 2024-08-02
- Weaknesses
- CWE-787
Affected products
- Fedora (Fedoraproject)
- Linux Kernel (Linux)
- H300e Firmware (Netapp)
- H300s Firmware (Netapp)
- H410s Firmware (Netapp)
- H500e Firmware (Netapp)
- H500s Firmware (Netapp)
- H700e Firmware (Netapp)
- H700s Firmware (Netapp)
- Node (Ovirt)
- Codeready Linux Builder (Redhat)
- Codeready Linux Builder Eus (Redhat)
- Codeready Linux Builder Eus For Power Little Endian (Redhat)
- Codeready Linux Builder For Power Little Endian Eus (Redhat)
- Enterprise Linux (Redhat)
- Enterprise Linux Eus (Redhat)
- Enterprise Linux For Ibm Z Systems (Redhat)
- Enterprise Linux For Ibm Z Systems Eus (Redhat)
- Enterprise Linux For Power Little Endian (Redhat)
- Enterprise Linux For Power Little Endian Eus (Redhat)
- Enterprise Linux For Real Time (Redhat)
- Enterprise Linux For Real Time For Nfv (Redhat)
- Enterprise Linux For Real Time For Nfv Tus (Redhat)
- Enterprise Linux For Real Time Tus (Redhat)
- Enterprise Linux Server Aus (Redhat)
- Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions (Redhat)
- Enterprise Linux Server Tus (Redhat)
- Enterprise Linux Server Update Services For Sap Solutions (Redhat)
- Virtualization (Redhat)
- Virtualization Host (Redhat)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2048738
- https://security.netapp.com/advisory/ntap-20220602-0001/
- https://www.openwall.com/lists/oss-security/2022/02/10/1
