CVE-2022-28734

Katalog CVE

CVSS 7.0 · High EPSS 1,1%

Kerentanan Out-of-bounds Write pada gnu grub2, netapp active iq unified manager. Skor CVSS 3.1 7.0 (High) menurut NVD.

Deskripsi (NVD)

Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by one position. This can lead to a out-of-bound write further when parsing the HTTP request, writing a NULL byte past the buffer. It's conceivable that an attacker controlled set of packets can lead to corruption of the GRUB2's internal memory metadata.

Rincian

Terbit di NVD

20 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.0 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 65,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28734 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20230825-0002/ advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2022/06/07/5 mailing list · advisory pihak ketiga