CVE-2022-46770 Denial of service in n/a
Guest OS users can cause denial of service in QubesOS Mirage firewall via crafted multicast UDP packets, leading to CPU exhaustion and loss of forwarding.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-46770?
CVE-2022-46770 is a high-severity denial of service vulnerability in n/a, published on 7 Dec 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255).
Weakness: CWE-835
Which versions are affected by CVE-2022-46770?
It affects 1 product.
Products include Linuxfoundation Mirage Firewall.
How do I fix CVE-2022-46770?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-46770 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-46770 exists.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Sources
Also known as GHSA-6vx5-8rxp-jw26, OSEC-2022-01.