PT-2022-7087 · Unknown · Qubes-Mirage-Firewall

Burghardt · Published 2022-07-12 · Updated 2023-08-08 · CVE-2022-46770

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions qubes-mirage-firewall versions 0.8.x through 0.8.3

Description The issue is related to a denial of service caused by a crafted multicast UDP packet. This can lead to CPU consumption and loss of forwarding. The vulnerability can be exploited by sending specially crafted UDP packets to an IP address range of 224.0.0.0 through 239.255.255.255.

Recommendations For versions 0.8.x through 0.8.3, consider restricting access to the vulnerable qubes-mirage-firewall to minimize the risk of exploitation. As a temporary workaround, avoid using the IP address range of 224.0.0.0 through 239.255.255.255 in the affected environment until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Infinite Loop

Resource Exhaustion

Weakness Enumeration

CWE-835

CWE-400

Related Identifiers

BDU:2023-07548

CVE-2022-46770

OSEC-2022-01

Affected Products

Qubes-Mirage-Firewall

References · 16

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/mirageos/qubes_mirage_firewall_dos.rb · Exploit
• 🔥 https://github.com/mirage/qubes-mirage-firewall/issues/166 · Exploit
• 🔥 https://exploit-db.com/exploits/51157 · Exploit
• https://osv.dev/vulnerability/CVE-2022-46770 · Vendor Advisory
• https://osv.dev/vulnerability/OSEC-2022-01 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07548 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-46770 · Security Note
• https://github.com/rapid7/metasploit-framework/pull/17348 · Note
• https://github.com/Solo5/solo5/pull/538 · Note
• https://github.com/mirage/qubes-mirage-firewall/pull/167 · Note
• https://mirage.io/blog/MSA03 · Note
• http://packetstormsecurity.com/files/171610/Qubes-Mirage-Firewall-0.8.3-Denial-Of-Service.html · Note
• https://mail-archive.com/[e-mail]/msg00103.html · Note
• https://vuldb.com/?id.215103 · Note
• https://mirageos.org/blog/MSA03 · Note