Vulnerability CVE-2022-33743

Vulnerability Name:

CVE-2022-33743 (CCN-230439)

Assigned:

2022-07-05

Published:

2022-07-05

Updated:

2022-11-05

Summary:

network backend may cause Linux netfront to use freed SKBs While adding logic to support XDP (eXpress Data Path), a code label was moved in a way allowing for SKBs having references (pointers) retained for further processing to nevertheless be freed.

CVSS v3 Severity:

7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

6.2 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
5.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

CVSS v2 Severity:

4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

4.9 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

Vulnerability Type:

CWE-noinfo

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2022-33743

Source: MLIST
Type: Mailing List, Patch, Third Party Advisory
[oss-security] 20220705 Xen Security Advisory 405 v3 (CVE-2022-33743) - network backend may cause Linux netfront to use freed SKBs

Source: CCN
Type: Xen Security Advisory XSA-405
network backend may cause Linux netfront to use freed SKBs

Source: CONFIRM
Type: Patch, Vendor Advisory
http://xenbits.xen.org/xsa/advisory-405.html

Source: XF
Type: UNKNOWN
xen-cve202233743-dos(230439)

Source: DEBIAN
Type: Third Party Advisory
DSA-5191

Source: MISC
Type: Vendor Advisory
https://xenbits.xenproject.org/xsa/advisory-405.txt

Vulnerable Configuration:

Configuration 1:

cpe:/o:xen:xen:-:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:*:*:*:*:*:*:*:* (Version >= 5.9 and <= 5.18)

Configuration 2:

cpe:/o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:xensource:xen:*:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.9:rc1:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.9.2:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.9.4:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.9.6:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.9.13:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.10:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.10.4:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.10.11:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.11.3:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.11.6:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.11.8:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.11:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.11.10:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.11.2:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.11.11:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.12.0:rc3:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.12:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.12.2:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.12.10:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.12.11:*:*:*:*:*:*:*

OR cpe:/a:linux:linux_kernel:5.13:rc6:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.13.4:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.13.7:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.14:rc2:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.13:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.14:rc6:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.14:rc4:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.13.13:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.14:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.14.6:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.14.9:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.14.13:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.14.14:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.15.2:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.15.8:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.15.11:*:*:*:*:*:*:*

OR cpe:/a:linux:linux_kernel:5.15:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.16:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.12.12:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.16.4:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.16.8:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.16.10:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:rc5:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.16.12:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.16.11:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.16.14:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.14.15:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:rc4:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:rc8:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17:-:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17.2:*:*:*:*:*:*:*

OR cpe:/o:linux:linux_kernel:5.17.5:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:8029	P	kernel-docs-5.14.21-150500.53.2 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:8090	P	reiserfs-kmp-default-5.14.21-150500.53.2 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7539	P	kernel-64kb-5.14.21-150500.53.2 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:3753	P	Security update for the Linux Kernel (Important)	2022-08-01
oval:org.opensuse.security:def:95383	P	Security update for the Linux Kernel (Important)	2022-08-01
oval:org.opensuse.security:def:627	P	Security update for the Linux Kernel (Important)	2022-08-01
oval:org.opensuse.security:def:95427	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:94472	P	(Important)	2022-07-21
oval:org.opensuse.security:def:93159	P	(Important)	2022-07-21
oval:org.opensuse.security:def:3643	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:95356	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:93837	P	(Important)	2022-07-21
oval:org.opensuse.security:def:589	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:95273	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:93319	P	(Important)	2022-07-21
oval:org.opensuse.security:def:3705	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:94051	P	(Important)	2022-07-21
oval:org.opensuse.security:def:3783	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:95335	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:93477	P	(Important)	2022-07-21
oval:org.opensuse.security:def:3720	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:95416	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:94263	P	(Important)	2022-07-21
oval:org.opensuse.security:def:3794	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:95350	P	Security update for the Linux Kernel (Important)	2022-07-21
oval:org.opensuse.security:def:93630	P	(Important)	2022-07-21
oval:org.opensuse.security:def:3726	P	Security update for the Linux Kernel (Important)	2022-07-21

BACK