PT-2022-19522 · Pexip · Pexip Infinity

Published 2022-07-17 · Updated 2022-07-25 · CVE-2022-29286

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 28.0

Description The issue allows remote attackers to trigger excessive resource consumption and termination due to registrar resource mishandling.

Recommendations For versions prior to 28.0, update to version 28.0 or later to resolve the issue.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2022-29286

Affected Products

Pexip Infinity

References · 6

• https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-29286 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29286 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29286 · Vendor Advisory
• https://t.me/cvenotify/33262 · Telegram Post
• https://t.me/cvenotify/33251 · Telegram Post
• https://t.me/cibsecurity/46422 · Telegram Post