Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
Name CVE-2022-48938 First vendor Publication 2024-08-22
Vendor Cve Last vendor Modification 2024-11-08

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

CDC-NCM: avoid overflow in sanity checking

A broken device may give an extreme offset like 0xFFF0 and a reasonable length for a fragment. In the sanity check as formulated now, this will create an integer overflow, defeating the sanity check. Both offset and offset + len need to be checked in such a manner that no overflow can occur. And those quantities should be unsigned.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48938

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-190 Integer Overflow or Wraparound (CWE/SANS Top 25)

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 7
Os 3504

Sources (Detail)

https://git.kernel.org/stable/c/49909c9f8458cacb5b241106cba65aba5a6d8f4c
https://git.kernel.org/stable/c/69560efa001397ebb8dc1c3e6a3ce00302bb9f7f
https://git.kernel.org/stable/c/7b737e47b87589031f0d4657f6d7b0b770474925
https://git.kernel.org/stable/c/8d2b1a1ec9f559d30b724877da4ce592edc41fdc
https://git.kernel.org/stable/c/9957fbf34f52a4d8945d1bf39aae400ef9a11246
https://git.kernel.org/stable/c/a612395c7631918e0e10ea48b9ce5ab4340f26a6
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
Date Informations
2025-01-08 02:47:32
  • Multiple Updates
2025-01-07 02:47:09
  • Multiple Updates
2024-12-25 02:45:56
  • Multiple Updates
2024-12-12 02:48:49
  • Multiple Updates
2024-11-22 02:46:14
  • Multiple Updates
2024-11-20 02:43:38
  • Multiple Updates
2024-11-13 21:22:00
  • Multiple Updates
2024-11-09 00:28:27
  • Multiple Updates
2024-11-08 21:28:08
  • Multiple Updates
2024-10-26 02:41:54
  • Multiple Updates
2024-10-25 02:43:40
  • Multiple Updates
2024-10-23 02:43:04
  • Multiple Updates
2024-10-03 02:39:08
  • Multiple Updates
2024-10-02 02:37:31
  • Multiple Updates
2024-09-04 02:36:47
  • Multiple Updates
2024-08-23 02:48:09
  • Multiple Updates
2024-08-23 02:35:05
  • Multiple Updates
2024-08-23 00:27:33
  • Multiple Updates
2024-08-22 17:27:24
  • Multiple Updates
2024-08-22 09:27:25
  • First insertion