PT-2022-7375 · Ipxe+1 · Ipxe+1

Rezaduty · Published 2022-11-21 · Updated 2024-06-13 · CVE-2022-4087

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions iPXE (affected versions not specified)

Description A vulnerability was found in the function tls new ciphertext of the file src/net/tls.c of the component TLS. The manipulation of the argument pad len leads to information exposure through discrepancy. This issue is related to incorrect access control and can be exploited by a remote attacker to disclose confidential information.

Recommendations To fix this issue, it is recommended to apply a patch with the name 186306d6199096b7a7c4b4574d4be8cdb8426729. As a temporary workaround, consider disabling the tls new ciphertext function until a patch is available. Restrict access to the src/net/tls.c file to minimize the risk of exploitation. Avoid using the argument pad len in the affected TLS component until the issue is resolved.

Fix

Improper Access Control

Side Channel Attack

Weakness Enumeration

CWE-284

CWE-203

Related Identifiers

BDU:2024-04507

CVE-2022-4087

Affected Products

Red Os

Ipxe

References · 10

• https://github.com/ipxe/ipxe/commit/186306d6199096b7a7c4b4574d4be8cdb8426729 · Patch
• https://osv.dev/vulnerability/CVE-2022-4087 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-04507 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-4087 · Security Note
• https://redos.red-soft.ru/support/secure · Note
• https://t.me/cvenotify/43550 · Telegram Post
• https://vuldb.com/?id.214054 · Note
• https://t.me/cvenotify/38125 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-ipxe-cve-2022-4087 · Note
• https://t.me/cibsecurity/53232 · Telegram Post