CVE-2022-2663

Katalog CVE

CVSS 5.3 · Medium EPSS 3,2%

Kerentanan Improper Restriction of Communication Channel to Intended Endpoints pada linux kernel, debian linux. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured.

Rincian

Terbit di NVD

1 September 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

EPSS (30 hari)

3,2% peluang dieksploitasi; lebih tinggi dari 87,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://dgl.cx/2022/08/nat-again-irc-cve-2022-2663 exploit · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5257 advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2022/08/30/1 mailing list · advisory pihak ketiga
• https://www.youtube.com/watch?v=WIq-YgQuYCA exploit · advisory pihak ketiga
• https://lore.kernel.org/netfilter-devel/20220826045658.100360-1-dgl%40dgl.cx/T/