The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/171289/Kernel-Live-Patch-Security-Notice-LNS-0092-1.html | |
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f90497a16e434c2211c66e3de8e77b17868382b8 | Mailing List Patch Vendor Advisory |
https://security.netapp.com/advisory/ntap-20221215-0006/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
AND |
|
History
08 Mar 2023, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
17 Feb 2023, 03:44
Type | Values Removed | Values Added |
---|---|---|
First Time |
Netapp active Iq Unified Manager
Netapp h500s Netapp h700s Netapp h700s Firmware Netapp h410c Firmware Netapp Netapp h410s Netapp h300s Firmware Netapp h500s Firmware Netapp h300s Netapp h410c Netapp h410s Firmware |
|
CPE | cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* |
|
References | (CONFIRM) https://security.netapp.com/advisory/ntap-20221215-0006/ - Third Party Advisory |
15 Dec 2022, 19:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
07 Nov 2022, 17:31
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
First Time |
Linux
Linux linux Kernel |
|
CWE | CWE-770 | |
References | (MISC) https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f90497a16e434c2211c66e3de8e77b17868382b8 - Mailing List, Patch, Vendor Advisory |
04 Nov 2022, 19:46
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-11-04 19:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-43945
Mitre link : CVE-2022-43945
CVE.ORG link : CVE-2022-43945
JSON object : View
Products Affected
netapp
- h700s_firmware
- h700s
- h300s_firmware
- h410c
- h410s
- active_iq_unified_manager
- h500s_firmware
- h410s_firmware
- h500s
- h410c_firmware
- h300s
linux
- linux_kernel