CVE-2022-22333 Memory corruption in Sterling Secure Proxy
A local attacker inside the Secure Zone can cause a denial of service via a buffer overflow in the Jetty-based GUI.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-22333?
CVE-2022-22333 is a medium-severity memory corruption vulnerability in IBM Sterling Secure Proxy, published on 23 Feb 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty based GUI in the Secure Zone not properly validating the sizes of the form content and/or HTTP headers submitted. A local attacker positioned inside the Secure Zone could submit a specially crafted HTTP request to disrupt service. IBM X-Force ID: 219133.
Weakness: CWE-120
Which versions are affected by CVE-2022-22333?
It affects 2 products.
Products include Ibm Sterling External Authentication Server, Ibm Sterling Secure Proxy.
How do I fix CVE-2022-22333?
No fix has been published for CVE-2022-22333 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-22333 being exploited?
There is no known exploitation of CVE-2022-22333 in the wild and no public exploit code.
Other vulnerabilities in IBM Sterling Secure Proxy
- CVE-2020-4462 XML external entity in External Authentication Server
- CVE-2013-0517 Command injection in Sterling External Authentication Server
- CVE-2022-22336 Denial of service in Sterling Secure Proxy
- CVE-2021-29722 Weak cryptography in Sterling Secure Proxy
- CVE-2021-29723 Weak cryptography in Sterling Secure Proxy
Sources
Also known as GHSA-35cr-x5j7-prhh.