CVE-2022-46397

FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2023-03-28

Last modified

2025-02-19

Weaknesses

CWE-329

Affected products

• Vector Packet Processor (Lfprojects)

References

• https://lists.fd.io/g/security-announce/message/2
• https://s3-docs.fd.io/vpp/23.02/