← Back

CVE-2022-23088

nvd nist
Published: Feb 15, 2024Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode (i.e., not associated with a SSID) a malicious beacon frame may overwrite kernel memory, leading to remote code execution.

Affected (29)

Products: Freebsd: Freebsd
Freebsd
1 product
Freebsd
Configuration A
29 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Freebsd
Before 12.3
Freebsd
From 12.4 to 13.0
Freebsd
Version 12.3 p1
Freebsd
Version 12.3 p2
Freebsd
Version 12.3 p3
Freebsd
Version 12.3 p4
Freebsd
Version 13.0 beta1
Freebsd
Version 13.0 beta2
Freebsd
Version 13.0 beta3-p1
Freebsd
Version 13.0 beta3
Freebsd
Version 13.0 beta4
Freebsd
Version 13.0 p10
Freebsd
Version 13.0 p1
Freebsd
Version 13.0 p2
Freebsd
Version 13.0 p3
Freebsd
Version 13.0 p4
Freebsd
Version 13.0 p5
Freebsd
Version 13.0 p6
Freebsd
Version 13.0 p7
Freebsd
Version 13.0 p8
Freebsd
Version 13.0 p9
Freebsd
Version 13.0 rc1
Freebsd
Version 13.0 rc2
Freebsd
Version 13.0 rc3
Freebsd
Version 13.0 rc4
Freebsd
Version 13.0 rc5-p1
Freebsd
Version 13.0 rc5
Freebsd
Version 13.1 b1-p1
Freebsd
Version 13.1 b2-p2

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (2)

Source: secteam@freebsd.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.