CVE-2022-27942
published 2022-03-26CVE-2022-27942: tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.
PriorityP433high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.10%
61.4th percentile
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| broadcom | tcpreplay | — | — |
| broadcom | tcpreplay | >= 0 < 4.4.2-1 | 4.4.2-1 |
| broadcom | tcpreplay | >= 0 < 4.4.2-1 | 4.4.2-1 |
| broadcom | tcpreplay | >= 0 < 4.4.2-1 | 4.4.2-1 |
| debian | tcpreplay | < tcpreplay 4.4.2-1 (bookworm) | tcpreplay 4.4.2-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv7.8HIGH
vendor_debian7.8LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: af_unix: Get user_ns from in_skb in unix_diag_get_exact().
vendor_redhat·2024-10-21·CVSS 5.5
CVE-2022-48970 [MEDIUM] CWE-476 kernel: af_unix: Get user_ns from in_skb in unix_diag_get_exact().
kernel: af_unix: Get user_ns from in_skb in unix_diag_get_exact().
In the Linux kernel, the following vulnerability has been resolved:
af_unix: Get user_ns from in_skb in unix_diag_get_exact().
Wei Chen reported a NULL deref in sk_user_ns() [0][1], and Paolo diagnosed
the root cause: in unix_diag_get_exact(), the newly allocated skb does not
have sk. [2]
We must get the user_ns from the NETLINK_CB(in_skb).sk and pass it to
sk_diag_fill().
[0]:
BUG: kernel NULL pointer dereference, address: 0000000000000270
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 12bbce067 P4D 12bbce067 PUD 12bc40067 PMD 0
Oops: 0000 [#1] PREEMPT SMP
CPU: 0 PID: 27942 Comm: syz-executor.0 Not tainted 6.1.0-rc5-next-20221118 #2
Hardware name: QEMU Standard PC (i440FX + PIIX,
Debian
CVE-2022-37049: tcpreplay - The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based...
vendor_debian·2022·CVSS 7.8
CVE-2022-37049 [HIGH] CVE-2022-37049: tcpreplay - The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based...
The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different from CVE-2022-27942.
Scope: local
bookworm: resolved (fixed in 4.4.2-1)
bullseye: open
forky: resolved (fixed in 4.4.2-1)
sid: resolved (fixed in 4.4.2-1)
trixie: resolved (fixed in 4.4.2-1)
Debian
CVE-2022-27942: tcpreplay - tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in co...
vendor_debian·2022·CVSS 7.8
CVE-2022-27942 [HIGH] CVE-2022-27942: tcpreplay - tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in co...
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.
Scope: local
bookworm: resolved (fixed in 4.4.2-1)
bullseye: open
forky: resolved (fixed in 4.4.2-1)
sid: resolved (fixed in 4.4.2-1)
trixie: resolved (fixed in 4.4.2-1)
GHSA
GHSA-w5hq-ffqp-5pfw: The component tcpprep in Tcpreplay v4
ghsa_unreviewed·2022-08-19·CVSS 7.8
CVE-2022-37049 [HIGH] CWE-787 GHSA-w5hq-ffqp-5pfw: The component tcpprep in Tcpreplay v4
The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different from CVE-2022-27942.
OSV
CVE-2022-37049: The component tcpprep in Tcpreplay v4
osv·2022-08-18·CVSS 7.8
CVE-2022-37049 [HIGH] CVE-2022-37049: The component tcpprep in Tcpreplay v4
The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different from CVE-2022-27942.
GHSA
GHSA-343c-9x28-wq5v: tcpprep in Tcpreplay 4
ghsa_unreviewed·2022-03-27
CVE-2022-27942 [HIGH] CWE-787 GHSA-343c-9x28-wq5v: tcpprep in Tcpreplay 4
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.
OSV
CVE-2022-27942: tcpprep in Tcpreplay 4
osv·2022-03-26·CVSS 7.8
CVE-2022-27942 [HIGH] CVE-2022-27942: tcpprep in Tcpreplay 4
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/appneta/tcpreplay/issues/719https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/https://security.gentoo.org/glsa/202210-08https://github.com/appneta/tcpreplay/issues/719https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWRZO7BG6DHA5NAC3COB45WFXLYRIERC/https://security.gentoo.org/glsa/202210-08
2022-03-26
Published