← Back

CVE-2022-0742

nvd nist
Published: Mar 18, 2022Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.

Affected (21)

Linux
1 product
Linux Kernel
Netapp
13 products
A400 Firmware
Aff 8300 Firmware
Aff 8700 Firmware
Fas 8300 Firmware
Fas 8700 Firmware
H300e Firmware
H300s Firmware
H410c Firmware
H410s Firmware
H500e Firmware
H500s Firmware
H700e Firmware
H700s Firmware
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
From 5.13 to 5.15.27
Linux Kernel
From 5.16 to 5.16.13
Linux Kernel
Version 5.17 rc1
Linux Kernel
Version 5.17 rc2
Linux Kernel
Version 5.17 rc3
Linux Kernel
Version 5.17 rc4
Linux Kernel
Version 5.17 rc5
Linux Kernel
Version 5.17 rc6
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
A400 Firmware
All versions
Running on/withPlatform Versions
Netapp
A400
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff 8300 Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff 8300
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff 8700 Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff 8700
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fas 8300 Firmware
All versions
Running on/withPlatform Versions
Netapp
Fas 8300
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fas 8700 Firmware
All versions
Running on/withPlatform Versions
Netapp
Fas 8700
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H300e Firmware
All versions
Running on/withPlatform Versions
Netapp
H300e
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H300s Firmware
All versions
Running on/withPlatform Versions
Netapp
H300s
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H410c Firmware
All versions
Running on/withPlatform Versions
Netapp
H410c
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H410s Firmware
All versions
Running on/withPlatform Versions
Netapp
H410s
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H500e Firmware
All versions
Running on/withPlatform Versions
Netapp
H500e
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H500s Firmware
All versions
Running on/withPlatform Versions
Netapp
H500s
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H700e Firmware
All versions
Running on/withPlatform Versions
Netapp
H700e
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H700s Firmware
All versions
Running on/withPlatform Versions
Netapp
H700s
All versions

Related CWEs

CWE-275
CWE-275
CWE-401
Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (6)

Source: cve-coordination@google.com
PatchVendor Advisory
Source: cve-coordination@google.com
Third Party Advisory
Source: cve-coordination@google.com
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory

Timeline

No history available yet.