PT-2022-27847 · Sslh · Sslh

Jubalh · Published 2022-12-21 · Updated 2022-12-28 · CVE-2022-4639

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sslh (affected versions not specified)

Description A critical issue has been found in the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msg info leads to a format string issue. The attack may be initiated remotely.

Recommendations To fix this issue, it is recommended to apply a patch. Specifically, the patch with the name b19f8a6046b080e4c2e28354a58556bb26040c6f should be applied. As a temporary workaround, consider disabling the hexdump function until a patch is available. Restrict access to the vulnerable probe.c file to minimize the risk of exploitation. Avoid using the argument msg info in the affected component until the issue is resolved.

Fix

Use of Externally-Controlled Format String

Buffer Overflow

Weakness Enumeration

CWE-134

CWE-119

Related Identifiers

CVE-2022-4639

Affected Products

Sslh

References · 9

• https://github.com/yrutschle/sslh/commit/b19f8a6046b080e4c2e28354a58556bb26040c6f · Patch
• https://github.com/yrutschle/sslh/pull/353 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-4639 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4639 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-4639 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4639 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-4639 · Security Note
• https://vuldb.com/?id.216497 · Note
• https://t.me/cibsecurity/55089 · Telegram Post