VDB
CVE-2022-2652
CVE-2022-2652
PUBLISHED
CVSS 7.300000190734863 HIGH
Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).
EPSS 0.33% · 26.5th percentile
Risk Scores
CVSS 3.0
7.300000190734863
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
EPSS Score
0.33%
26.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| v4l2loopback_project | v4l2loopback | 0 |
| umlaeute | umlaeute/v4l2loopback | * |
Timeline
- Aug 4, 2022 CVE Published
- Aug 5, 2022 EPSS Score
- Sep 21, 2022 EPSS Score
- Nov 7, 2022 EPSS Score
- Dec 24, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 29, 2023 EPSS Score
- May 15, 2023 EPSS Score
- Jul 1, 2023 EPSS Score
- Aug 17, 2023 EPSS Score
- Oct 3, 2023 EPSS Score