VDB
BDU%3A2022-02096
BDU%3A2022-02096
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость функции icmp6_send_response_with_addrs_and_netif() реализации набора протоколов TCP/IP lwIP, позволяющая нарушителю получить доступ к конфиденциальным данным
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Adam Dunkels | Debian GNU/Linux, lwIP |
Timeline
- Apr 11, 2022 CVE Published
References
- http://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=d843e47a1d65451bd7f7aaa5017b408bd108be88 url
- https://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=488d4ad2460c3b41bef69724cad89c28a905eda9 url
- https://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=489405839ae0fea8b99c4896f632eb688dc8a19a url
- https://nvd.nist.gov/vuln/detail/CVE-2020-22283 url
- https://savannah.nongnu.org/bugs/index.php?58553 url
- https://security-tracker.debian.org/tracker/CVE-2020-22283 url