CVE-2022-1982
published 2022-06-02CVE-2022-1982: Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on…
PriorityP433medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.86%
54.6th percentile
Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | mattermost_mattermost-server | >= 5.0.0 < 6.3.8 | 6.3.8 |
| github.com | mattermost_mattermost-server | >= 6.4.0 < 6.4.3 | 6.4.3 |
| github.com | mattermost_mattermost-server | >= 6.5.0 < 6.5.1 | 6.5.1 |
| github.com | mattermost_mattermost-server | >= 6.6.0 < 6.6.1 | 6.6.1 |
| mattermost | mattermost | — | — |
| mattermost | mattermost | — | — |
| mattermost | mattermost | 5.x – 5.39 | — |
| mattermost | mattermost | 6.4.x – 6.4.2 | — |
| mattermost | mattermost | 6.x – 6.3.7 | — |
| mattermost | mattermost_server | — | — |
| mattermost | mattermost_server | — | — |
| mattermost | mattermost_server | >= 5.0.0 < 6.3.8 | 6.3.8 |
| mattermost | mattermost_server | >= 6.4.0 < 6.4.3 | 6.4.3 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Uncontrolled Resource Consumption in Mattermost server
osv·2022-06-03
CVE-2022-1982 [MEDIUM] Uncontrolled Resource Consumption in Mattermost server
Uncontrolled Resource Consumption in Mattermost server
Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post.
GHSA
Uncontrolled Resource Consumption in Mattermost server
ghsa·2022-06-03
CVE-2022-1982 [MEDIUM] CWE-400 Uncontrolled Resource Consumption in Mattermost server
Uncontrolled Resource Consumption in Mattermost server
Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post.
Red Hat
kernel: mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
vendor_redhat·2024-10-21·CVSS 5.5
CVE-2022-48972 [MEDIUM] CWE-476 kernel: mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
kernel: mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
In the Linux kernel, the following vulnerability has been resolved:
mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
Kernel fault injection test reports null-ptr-deref as follows:
BUG: kernel NULL pointer dereference, address: 0000000000000008
RIP: 0010:cfg802154_netdev_notifier_call+0x120/0x310 include/linux/list.h:114
Call Trace:
raw_notifier_call_chain+0x6d/0xa0 kernel/notifier.c:87
call_netdevice_notifiers_info+0x6e/0xc0 net/core/dev.c:1944
unregister_netdevice_many_notify+0x60d/0xcb0 net/core/dev.c:1982
unregister_netdevice_queue+0x154/0x1a0 net/core/dev.c:10879
register_netdevice+0x9a8/0xb90 net/core/dev.c:10083
ieee802154_if_add+0x6ed/0x7e0 net/mac802154/iface.c:659
ieee802154_register_hw+0x29c/0x330
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-06-02
Published