Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-40279

An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). l2_packet_receive_timeout in wpa_supplicant/src/l2_packet/l2_packet_pcap.c has a missing check on the return value of pcap_dispatch, leading to a denial of service (malfunction).

Published

2022-09-29T03:15:15.483

Last Modified

2024-11-21T07:21:10.950

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses

Type: Primary
CWE-252

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	samsung	tizenrt	1.0	Yes
Operating System	samsung	tizenrt	1.1	Yes
Operating System	samsung	tizenrt	2.0	Yes
Operating System	samsung	tizenrt	2.0	Yes
Operating System	samsung	tizenrt	3.0	Yes
Operating System	samsung	tizenrt	3.1	Yes

References

https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaaf/external/wpa_supplicant/src/l2_packet/l2_packet_pcap.c#L181 Exploit, Third Party Advisory ([email protected])
https://github.com/Samsung/TizenRT/issues/5629 Issue Tracking, Third Party Advisory ([email protected])
https://linux.die.net/man/3/pcap_dispatch Technical Description, Third Party Advisory ([email protected])
https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaaf/external/wpa_supplicant/src/l2_packet/l2_packet_pcap.c#L181 Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/Samsung/TizenRT/issues/5629 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://linux.die.net/man/3/pcap_dispatch Technical Description, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)