oss-sec mailing list archives

Re: Linux kernel: Netfilter heap buffer overflow: Is this CVE-2022-32250?

From: Solar Designer <solar () openwall com>
Date: Sun, 3 Jul 2022 19:34:31 +0200

On Sun, Jul 03, 2022 at 06:09:07PM +0200, Keine Eile wrote:

Pardon my may be silly question.


No, the Netfilter bug disclosed this weekend is not CVE-2022-32250.

CVE-2022-32250 refers to another Netfilter bug, disclosed a month ago:

https://www.openwall.com/lists/oss-security/2022/05/31/1

Alexander

Current thread:

Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init Solar Designer (Jul 02)
- Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init Solar Designer (Jul 02)
  - Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init Demi Marie Obenour (Jul 03)
    - Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init Solar Designer (Jul 03)
    - Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init Solar Designer (Jul 03)
- Linux kernel: Netfilter heap buffer overflow: Is this CVE-2022-32250? Keine Eile (Jul 03)
  - Re: Linux kernel: Netfilter heap buffer overflow: Is this CVE-2022-32250? Solar Designer (Jul 03)
- Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init Marcus Meissner (Jul 04)
  - Re: Linux kernel: Netfilter heap buffer overflow in nft_set_elem_init Solar Designer (Aug 06)