CVE-2022-2211: A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function. This…

PriorityP428medium6.5CVSS 3.1

AVNACLPRNUIRSUCNINAH

EPSS

0.88%

55.2th percentile

A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or malicious actor.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	guestfs-tools	< guestfs-tools 1.48.2-1+deb12u1 (bookworm)	guestfs-tools 1.48.2-1+deb12u1 (bookworm)
debian	libguestfs	< guestfs-tools 1.48.2-1+deb12u1 (bookworm)	guestfs-tools 1.48.2-1+deb12u1 (bookworm)
libguestfs	libguestfs	>= 0 < 1:1.46.2-1	1:1.46.2-1
libguestfs	libguestfs	>= 0 < 1:1.46.2-1	1:1.46.2-1
libguestfs	libguestfs	>= 0 < 1:1.46.2-1	1:1.46.2-1
redhat	enterprise_linux	—	—
redhat	enterprise_linux	—	—

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

osv6.5MEDIUM

vendor_debian6.5MEDIUM

vendor_redhat6.5MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.