CVE-2022-1012

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem.

CVSS v3 8.2 HIGH

8.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=2064604	Issue Tracking Third Party Advisory
https://lore.kernel.org/lkml/20220427065233.2075-1-w%401wt.eu/T/
https://security.netapp.com/advisory/ntap-20221020-0006/	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel:5.18:-::::::
	cpe:2.3:o:linux:linux_kernel:5.18:rc1::::::
	cpe:2.3:o:linux:linux_kernel:5.18:rc2::::::
	cpe:2.3:o:linux:linux_kernel:5.18:rc3::::::
	cpe:2.3:o:linux:linux_kernel:5.18:rc4::::::
	cpe:2.3:o:linux:linux_kernel:5.18:rc5::::::

History

07 Nov 2023, 03:41

Type	Values Removed	Values Added
References	{'url': 'https://lore.kernel.org/lkml/20220427065233.2075-1-w@1wt.eu/T/', 'name': 'https://lore.kernel.org/lkml/20220427065233.2075-1-w@1wt.eu/T/', 'tags': ['Mailing List', 'Patch', 'Vendor Advisory'], 'refsource': 'MISC'}	() https://lore.kernel.org/lkml/20220427065233.2075-1-w%401wt.eu/T/ -

Information

Published : 2022-08-05 16:15

Updated : 2024-02-28 19:29

NVD link : CVE-2022-1012

Mitre link : CVE-2022-1012

CVE.ORG link : CVE-2022-1012

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-401

Missing Release of Memory after Effective Lifetime

{"id": "CVE-2022-1012", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.2, "exploitabilityScore": 3.9}]}, "published": "2022-08-05T16:15:11.370", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064604", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://lore.kernel.org/lkml/20220427065233.2075-1-w%401wt.eu/T/", "source": "secalert@redhat.com"}, {"url": "https://security.netapp.com/advisory/ntap-20221020-0006/", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-401"}]}, {"type": "Secondary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-401"}]}], "descriptions": [{"lang": "en", "value": "A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem."}, {"lang": "es", "value": "Se ha encontrado un problema de p\u00e9rdida de memoria en el algoritmo de generaci\u00f3n de puertos de origen TCP en el archivo net/ipv4/tcp.c debido al peque\u00f1o tama\u00f1o de la tabla de perturbaci\u00f3n. Este fallo puede permitir a un atacante un filtrado de informaci\u00f3n y puede causar un problema de denegaci\u00f3n de servicio"}], "lastModified": "2023-11-07T03:41:42.023", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE93544F-B946-47CF-9697-FBF3484FCB92", "versionEndExcluding": "5.18"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.18:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0384FA0A-DE99-48D7-84E3-46ED0C3B5E03"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6AD94161-84BB-42E6-9882-4FC0C42E9FC1"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AB06DDF-3C2B-416D-B448-E990D8FF67A9"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EAE6C6C5-4D21-4C04-897C-70CBBB3D7B91"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA5F085D-52F3-4EE2-8353-455D1A6FE073"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6EE5B78-0D83-4715-893C-ABD69B49E7FC"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}