Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-1841


In subsys/net/ip/tcp.c , function tcp_flags , when the incoming parameter flags is ECN or CWR , the buf will out-of-bounds write a byte zero.


Published

2022-08-31T20:15:08.537

Last Modified

2024-11-21T06:41:35.233

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-787
  • Type: Primary
    CWE-787

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System zephyrproject zephyr ≤ 3.0.0 Yes

References