by Kastro
Paper/Archive/CVE-2022-50235

CVE-2022-50235

Linux Linux — NFSD: Protect against send buffer overflow in NFSv2 READDIR

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 37.2.372 × 207.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READDIR Restore the previous limit on the @count argument to prevent a buffer overflow attack.

Affected

ProductAffectedFixed inSource
Linux9e291a6a28d32545ed2fd959a8165144d1724df1 – < 0e57d696f60dee6117a8ace0cac7c5761d3752770e57d696f60dee6117a8ace0cac7c5761d375277CNA
Linuxeabc0aab98e5218ceecd82069b0d6fdfff5ee885 – < dc7f225090c29a5f3b9419b1af32846a201555e7dc7f225090c29a5f3b9419b1af32846a201555e7CNA
Linux53b1119a6e5028b125f431a0116ba73510d82a72 – < c2a878095b5c6f04f90553a3c45872f990dab14ec2a878095b5c6f04f90553a3c45872f990dab14eCNA
Linux53b1119a6e5028b125f431a0116ba73510d82a72 – < f59c74df82f6ac9d2ea4e01aa3ae7c6c4481652df59c74df82f6ac9d2ea4e01aa3ae7c6c4481652dCNA
Linux53b1119a6e5028b125f431a0116ba73510d82a72 – < 00b4492686e0497fdb924a9d4c8f6f99377e176c00b4492686e0497fdb924a9d4c8f6f99377e176cCNA
Linux5.15.12 – < 5.15.755.15.75CNA
Linux5.165.15.75CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgit.kernel.org/stable/c/c2a878095b5c6f04f90553a3c45872f990dab14erefgit.kernel.org/stable/c/f59c74df82f6ac9d2ea4e01aa3ae7c6c4481652drefgit.kernel.org/stable/c/00b4492686e0497fdb924a9d4c8f6f99377e176crefgit.kernel.org/stable/c/0e57d696f60dee6117a8ace0cac7c5761d375277refgit.kernel.org/stable/c/dc7f225090c29a5f3b9419b1af32846a201555e7