WID-SEC-W-2022-2288
Vulnerability from csaf_certbund - Published: 2022-12-11 23:00 - Updated: 2023-08-23 22:00Es existiert eine Schwachstelle im Linux Kernel. Der Fehler besteht aufgrund eines stapelbasierten Pufferüberlaufs. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle VM
Oracle
|
cpe:/a:oracle:vm:-
|
— | |
|
Open Source Linux Kernel 4.14
Open Source / Linux Kernel
|
cpe:/o:linux:linux_kernel:4.14
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
IBM Spectrum Protect plus 10.1
IBM
|
cpe:/a:ibm:spectrum_protect:plus_10.1
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Open Source Linux Kernel 5.15
Open Source / Linux Kernel
|
cpe:/o:linux:linux_kernel:5.15
|
— | |
|
IBM QRadar SIEM 7.5
IBM
|
cpe:/a:ibm:qradar_siem:7.5
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Open Source Linux Kernel 6.0
Open Source / Linux Kernel
|
cpe:/o:linux:linux_kernel:6.0
|
— | |
|
Open Source Linux Kernel 5.4
Open Source / Linux Kernel
|
cpe:/o:linux:linux_kernel:5.4
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Open Source Linux Kernel 4.19
Open Source / Linux Kernel
|
cpe:/o:linux:linux_kernel:4.19
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Open Source Linux Kernel 4.9
Open Source / Linux Kernel
|
cpe:/o:linux:linux_kernel:4.9
|
— | |
|
Open Source CentOS
Open Source
|
cpe:/o:centos:centos:-
|
— | |
|
Open Source Linux Kernel 5.10
Open Source / Linux Kernel
|
cpe:/o:linux:linux_kernel:5.10
|
— |
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Der Kernel stellt den Kern des Linux Betriebssystems dar.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2022-2288 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-2288.json"
},
{
"category": "self",
"summary": "WID-SEC-2022-2288 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2288"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-1822 vom 2023-08-24",
"url": "http://linux.oracle.com/errata/ELSA-2023-1822.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7010099 vom 2023-07-06",
"url": "https://www.ibm.com/support/pages/node/7010099"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7007815 vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/7007815"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7005589 vom 2023-06-21",
"url": "https://www.ibm.com/support/pages/node/7005589"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:3491 vom 2023-06-06",
"url": "https://access.redhat.com/errata/RHSA-2023:3491"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:3431 vom 2023-06-06",
"url": "https://access.redhat.com/errata/RHSA-2023:3431"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:3388 vom 2023-05-31",
"url": "https://access.redhat.com/errata/RHSA-2023:3388"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1822 vom 2023-04-19",
"url": "https://access.redhat.com/errata/RHSA-2023:1822"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1706 vom 2023-04-11",
"url": "https://access.redhat.com/errata/RHSA-2023:1706"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1705 vom 2023-04-11",
"url": "https://access.redhat.com/errata/RHSA-2023:1705"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-1566 vom 2023-04-06",
"url": "http://linux.oracle.com/errata/ELSA-2023-1566.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1659 vom 2023-04-05",
"url": "https://access.redhat.com/errata/RHSA-2023:1659"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1566 vom 2023-04-04",
"url": "https://access.redhat.com/errata/RHSA-2023:1566"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1584 vom 2023-04-04",
"url": "https://access.redhat.com/errata/RHSA-2023:1584"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1435 vom 2023-03-23",
"url": "https://access.redhat.com/errata/RHSA-2023:1435"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1251 vom 2023-03-15",
"url": "https://access.redhat.com/errata/RHSA-2023:1251"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1203 vom 2023-03-14",
"url": "https://access.redhat.com/errata/RHSA-2023:1203"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1220 vom 2023-03-14",
"url": "https://access.redhat.com/errata/RHSA-2023:1220"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1202 vom 2023-03-14",
"url": "https://access.redhat.com/errata/RHSA-2023:1202"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1221 vom 2023-03-14",
"url": "https://access.redhat.com/errata/RHSA-2023:1221"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-1091 vom 2023-03-08",
"url": "http://linux.oracle.com/errata/ELSA-2023-1091.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1109 vom 2023-03-08",
"url": "https://access.redhat.com/errata/RHSA-2023:1109"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1110 vom 2023-03-08",
"url": "https://access.redhat.com/errata/RHSA-2023:1110"
},
{
"category": "external",
"summary": "CentOS Security Advisory CESA-2023:1091 vom 2023-03-08",
"url": "https://lists.centos.org/pipermail/centos-announce/2023-March/086390.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1092 vom 2023-03-07",
"url": "https://access.redhat.com/errata/RHSA-2023:1092"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1101 vom 2023-03-07",
"url": "https://access.redhat.com/errata/RHSA-2023:1101"
},
{
"category": "external",
"summary": "Ubuntu Security Notice LSN-0092-1 vom 2023-03-07",
"url": "https://ubuntu.com/security/notices/LSN-0092-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1091 vom 2023-03-07",
"url": "https://access.redhat.com/errata/RHSA-2023:1091"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1103 vom 2023-03-07",
"url": "https://access.redhat.com/errata/RHSA-2023:1103"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5919-1 vom 2023-03-03",
"url": "https://ubuntu.com/security/notices/USN-5919-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5917-1 vom 2023-03-03",
"url": "https://ubuntu.com/security/notices/USN-5917-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5920-1 vom 2023-03-03",
"url": "https://ubuntu.com/security/notices/USN-5920-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-0951 vom 2023-03-01",
"url": "http://linux.oracle.com/errata/ELSA-2023-0951.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:0944 vom 2023-02-28",
"url": "https://access.redhat.com/errata/RHSA-2023:0944"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:1008 vom 2023-02-28",
"url": "https://access.redhat.com/errata/RHSA-2023:1008"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:0951 vom 2023-02-28",
"url": "https://access.redhat.com/errata/RHSA-2023:0951"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:0979 vom 2023-02-28",
"url": "https://access.redhat.com/errata/RHSA-2023:0979"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:0945 vom 2023-02-28",
"url": "https://access.redhat.com/errata/RHSA-2023:0945"
},
{
"category": "external",
"summary": "Seclists.org Security Notification vom 2022-12-11",
"url": "https://seclists.org/oss-sec/2022/q4/178"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2022-10073 vom 2022-12-13",
"url": "https://linux.oracle.com/errata/ELSA-2022-10073.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2022-10072 vom 2022-12-13",
"url": "https://linux.oracle.com/errata/ELSA-2022-10072.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2022-10079 vom 2022-12-12",
"url": "https://linux.oracle.com/errata/ELSA-2022-10079.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2022-10080 vom 2022-12-12",
"url": "https://linux.oracle.com/errata/ELSA-2022-10080.html"
},
{
"category": "external",
"summary": "ORACLE OVMSA-2022-0032 vom 2022-12-14",
"url": "https://oss.oracle.com/pipermail/oraclevm-errata/2022-December/001066.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2022-10071 vom 2022-12-13",
"url": "http://linux.oracle.com/errata/ELSA-2022-10071.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2022-10078 vom 2022-12-13",
"url": "http://linux.oracle.com/errata/ELSA-2022-10078.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2022-10081 vom 2022-12-13",
"url": "http://linux.oracle.com/errata/ELSA-2022-10081.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4503-1 vom 2022-12-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013251.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4544-1 vom 2022-12-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013270.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4546-1 vom 2022-12-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013269.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4506-1 vom 2022-12-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013253.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4543-1 vom 2022-12-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013268.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4513-1 vom 2022-12-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013255.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4545-1 vom 2022-12-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013267.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4534-1 vom 2022-12-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013265.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4510-1 vom 2022-12-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013254.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4528-1 vom 2022-12-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013264.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4539-1 vom 2022-12-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013263.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4533-1 vom 2022-12-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013262.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4542-1 vom 2022-12-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013266.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4520-1 vom 2022-12-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013261.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4515-1 vom 2022-12-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013259.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4516-1 vom 2022-12-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013258.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4527-1 vom 2022-12-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013260.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4518-1 vom 2022-12-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013257.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4517-1 vom 2022-12-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013256.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4505-1 vom 2022-12-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013250.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4504-1 vom 2022-12-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013252.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4572-1 vom 2022-12-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013281.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4551-1 vom 2022-12-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013271.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4577-1 vom 2022-12-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013282.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4550-1 vom 2022-12-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013277.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4574-1 vom 2022-12-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013279.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4560-1 vom 2022-12-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013276.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4562-1 vom 2022-12-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013278.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4559-1 vom 2022-12-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013274.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4566-1 vom 2022-12-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013273.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4573-1 vom 2022-12-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013280.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4569-1 vom 2022-12-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013275.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4589-1 vom 2022-12-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013294.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4595-1 vom 2022-12-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013298.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4585-1 vom 2022-12-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013296.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4580-1 vom 2022-12-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013291.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4587-1 vom 2022-12-20",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013292.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-3244 vom 2022-12-22",
"url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4617-1 vom 2022-12-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013342.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4615-1 vom 2022-12-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013338.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-3245 vom 2022-12-23",
"url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4613-1 vom 2022-12-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013340.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4614-1 vom 2022-12-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013337.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2022:4616-1 vom 2022-12-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013339.html"
},
{
"category": "external",
"summary": "ORACLE OVMSA-2023-0001 vom 2023-01-04",
"url": "https://oss.oracle.com/pipermail/oraclevm-errata/2023-January/001067.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2022-10108 vom 2023-01-04",
"url": "http://linux.oracle.com/errata/ELSA-2022-10108.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12006 vom 2023-01-09",
"url": "https://linux.oracle.com/errata/ELSA-2023-12006.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12007 vom 2023-01-09",
"url": "http://linux.oracle.com/errata/ELSA-2023-12007.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12008 vom 2023-01-10",
"url": "http://linux.oracle.com/errata/ELSA-2023-12008.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12009 vom 2023-01-10",
"url": "http://linux.oracle.com/errata/ELSA-2023-12009.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5799-1 vom 2023-01-11",
"url": "https://ubuntu.com/security/notices/USN-5799-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12018 vom 2023-01-12",
"url": "https://linux.oracle.com/errata/ELSA-2023-12018.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12017 vom 2023-01-12",
"url": "https://linux.oracle.com/errata/ELSA-2023-12017.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5803-1 vom 2023-01-13",
"url": "https://ubuntu.com/security/notices/USN-5803-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5809-1 vom 2023-01-17",
"url": "https://ubuntu.com/security/notices/USN-5809-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5814-1 vom 2023-01-19",
"url": "https://ubuntu.com/security/notices/USN-5814-1"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASLIVEPATCH-2023-102 vom 2023-01-24",
"url": "https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-102.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASLIVEPATCH-2023-101 vom 2023-01-24",
"url": "https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-101.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASLIVEPATCH-2023-099 vom 2023-01-24",
"url": "https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-099.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASLIVEPATCH-2023-097 vom 2023-01-24",
"url": "https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-097.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASKERNEL-5.15-2023-012 vom 2023-01-24",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.15-2023-012.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASKERNEL-5.10-2023-025 vom 2023-01-24",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.10-2023-025.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5831-1 vom 2023-01-27",
"url": "https://ubuntu.com/security/notices/USN-5831-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5832-1 vom 2023-01-30",
"url": "https://ubuntu.com/security/notices/USN-5832-1"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2LIVEPATCH-2023-105 vom 2023-02-09",
"url": "https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-105.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2LIVEPATCH-2023-107 vom 2023-02-09",
"url": "https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-107.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2LIVEPATCH-2023-103 vom 2023-02-09",
"url": "https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-103.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2LIVEPATCH-2023-106 vom 2023-02-09",
"url": "https://alas.aws.amazon.com/AL2/ALASLIVEPATCH-2023-106.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5859-1 vom 2023-02-10",
"url": "https://ubuntu.com/security/notices/USN-5860-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5877-1 vom 2023-02-16",
"url": "https://ubuntu.com/security/notices/USN-5877-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5879-1 vom 2023-02-16",
"url": "https://ubuntu.com/security/notices/USN-5879-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:0858 vom 2023-02-21",
"url": "https://access.redhat.com/errata/RHSA-2023:0858"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:0856 vom 2023-02-21",
"url": "https://access.redhat.com/errata/RHSA-2023:0856"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5883-1 vom 2023-02-22",
"url": "https://ubuntu.com/security/notices/USN-5883-1"
}
],
"source_lang": "en-US",
"title": "Linux Kernel: Schwachstelle erm\u00f6glicht Denial of Service",
"tracking": {
"current_release_date": "2023-08-23T22:00:00.000+00:00",
"generator": {
"date": "2024-08-15T17:39:41.290+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2022-2288",
"initial_release_date": "2022-12-11T23:00:00.000+00:00",
"revision_history": [
{
"date": "2022-12-11T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2022-12-12T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2022-12-13T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von ORACLE und Oracle Linux aufgenommen"
},
{
"date": "2022-12-18T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-12-19T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-12-20T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2022-12-22T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2022-12-26T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von SUSE und Debian aufgenommen"
},
{
"date": "2023-01-04T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von ORACLE und Oracle Linux aufgenommen"
},
{
"date": "2023-01-09T23:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2023-01-10T23:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-01-11T23:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2023-01-12T23:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-01-17T23:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-01-19T23:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-01-23T23:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2023-01-29T23:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-01-30T23:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-02-08T23:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2023-02-09T23:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-02-15T23:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-02-16T23:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-02-21T23:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-02-22T23:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-02-28T23:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-03-01T23:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2023-03-05T23:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-03-07T23:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von Red Hat und Ubuntu aufgenommen"
},
{
"date": "2023-03-08T23:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von CentOS, Red Hat und Oracle Linux aufgenommen"
},
{
"date": "2023-03-14T23:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-03-15T23:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-03-23T23:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-04-03T22:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-04-04T22:00:00.000+00:00",
"number": "34",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-04-05T22:00:00.000+00:00",
"number": "35",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-04-10T22:00:00.000+00:00",
"number": "36",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2023-04-11T22:00:00.000+00:00",
"number": "37",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-04-19T22:00:00.000+00:00",
"number": "38",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-05-31T22:00:00.000+00:00",
"number": "39",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-06-05T22:00:00.000+00:00",
"number": "40",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-06-06T22:00:00.000+00:00",
"number": "41",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-06-20T22:00:00.000+00:00",
"number": "42",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2023-06-28T22:00:00.000+00:00",
"number": "43",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2023-07-06T22:00:00.000+00:00",
"number": "44",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2023-08-23T22:00:00.000+00:00",
"number": "45",
"summary": "Neue Updates von Oracle Linux aufgenommen"
}
],
"status": "final",
"version": "45"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM QRadar SIEM 7.5",
"product": {
"name": "IBM QRadar SIEM 7.5",
"product_id": "T022954",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:7.5"
}
}
},
{
"category": "product_name",
"name": "IBM Spectrum Protect plus 10.1",
"product": {
"name": "IBM Spectrum Protect plus 10.1",
"product_id": "T015895",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:spectrum_protect:plus_10.1"
}
}
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source CentOS",
"product": {
"name": "Open Source CentOS",
"product_id": "1727",
"product_identification_helper": {
"cpe": "cpe:/o:centos:centos:-"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source Linux Kernel 4.14",
"product": {
"name": "Open Source Linux Kernel 4.14",
"product_id": "346147",
"product_identification_helper": {
"cpe": "cpe:/o:linux:linux_kernel:4.14"
}
}
},
{
"category": "product_name",
"name": "Open Source Linux Kernel 4.19",
"product": {
"name": "Open Source Linux Kernel 4.19",
"product_id": "384298",
"product_identification_helper": {
"cpe": "cpe:/o:linux:linux_kernel:4.19"
}
}
},
{
"category": "product_name",
"name": "Open Source Linux Kernel 5.10",
"product": {
"name": "Open Source Linux Kernel 5.10",
"product_id": "T017707",
"product_identification_helper": {
"cpe": "cpe:/o:linux:linux_kernel:5.10"
}
}
},
{
"category": "product_name",
"name": "Open Source Linux Kernel 5.15",
"product": {
"name": "Open Source Linux Kernel 5.15",
"product_id": "T021127",
"product_identification_helper": {
"cpe": "cpe:/o:linux:linux_kernel:5.15"
}
}
},
{
"category": "product_name",
"name": "Open Source Linux Kernel 4.9",
"product": {
"name": "Open Source Linux Kernel 4.9",
"product_id": "T025534",
"product_identification_helper": {
"cpe": "cpe:/o:linux:linux_kernel:4.9"
}
}
},
{
"category": "product_name",
"name": "Open Source Linux Kernel 5.4",
"product": {
"name": "Open Source Linux Kernel 5.4",
"product_id": "T025535",
"product_identification_helper": {
"cpe": "cpe:/o:linux:linux_kernel:5.4"
}
}
},
{
"category": "product_name",
"name": "Open Source Linux Kernel 6.0",
"product": {
"name": "Open Source Linux Kernel 6.0",
"product_id": "T025536",
"product_identification_helper": {
"cpe": "cpe:/o:linux:linux_kernel:6.0"
}
}
}
],
"category": "product_name",
"name": "Linux Kernel"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
},
{
"category": "product_name",
"name": "Oracle VM",
"product": {
"name": "Oracle VM",
"product_id": "T011119",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:vm:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-4378",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle im Linux Kernel. Der Fehler besteht aufgrund eines stapelbasierten Puffer\u00fcberlaufs. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu verursachen."
}
],
"product_status": {
"known_affected": [
"T011119",
"346147",
"67646",
"T015895",
"T004914",
"T021127",
"T022954",
"2951",
"T002207",
"T025536",
"T025535",
"T000126",
"384298",
"398363",
"T025534",
"1727",
"T017707"
]
},
"release_date": "2022-12-11T23:00:00.000+00:00",
"title": "CVE-2022-4378"
}
]
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.