CVE-2022-3435 Linux Kernel IPv4 fib_semantics.c fib_nh_match out-of-bounds
A remote attacker can trigger an out-of-bounds read in the Linux Kernel IPv4 handler, potentially disclosing sensitive memory contents.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-3435?
CVE-2022-3435 is a medium-severity vulnerability in Debian Debian Linux, published on 8 Oct 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-210357 was assigned to this vulnerability.
Weakness: CWE-119
Which versions are affected by CVE-2022-3435?
It affects 3 products.
Products include Debian Debian Linux, Fedoraproject Fedora, Linux kernel.
How do I fix CVE-2022-3435?
Apply the vendor's patch.
Is CVE-2022-3435 being exploited?
There is no known exploitation of CVE-2022-3435 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2022-3435, GHSA-hcgg-5q2q-c9qf, UBUNTU-CVE-2022-3435.