PT-2022-17916 · Unknown+3 · V4L2Loopback+3

Published 2022-08-04 · Updated 2024-04-08 · CVE-2022-2652

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions v4l2loopback (affected versions not specified)

Description The issue allows for potential kernel stack memory leakage due to improperly crafted format strings in the card label. Additionally, there is a possibility of a Denial of Service (DoS) because the v4l2loopback kernel module may crash when providing the card label on request, especially when many %s modifiers are used in a row.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

ALT-PU-2022-7650

ALT-PU-2023-8425

CVE-2022-2652

OPENSUSE-SU-2022:10159-1

OPENSUSE-SU-2022:10160-1

OPENSUSE-SU-2022_10159-1

OPENSUSE-SU-2022_10160-1

OPENSUSE-SU-2024:12372-1

Affected Products

Alt Linux

Debian

Suse

V4L2Loopback

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2652.json · Exploit
• 🔥 https://huntr.dev/bounties/1b055da5-7a9e-4409-99d7-030280d242d5 · Exploit
• https://github.com/umlaeute/v4l2loopback/commit/e4cd225557486c420f6a34411f98c575effd43dd · Patch
• https://osv.dev/vulnerability/CVE-2022-2652 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:10160-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2652 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-2652 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:10159-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-2652 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-2652 · Security Note
• https://ubuntu.com/security/CVE-2022-2652 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-2652 · Vendor Advisory
• https://lists.opensuse.org/archives/list/[e-mail]/thread/T7TOUD7WBZ7HIZPTAF5TWVMSY3TRYEZ7 · Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/F2WY45Y5MOK5BLB5QRH5F6TM4CWLBTL5 · Note
• https://bugzilla.suse.com/1202156 · Note