CVE-2022-32296CWE-330

CVE-2022-32296

Low · published June 6, 2022

CVSS v3.1
3.3
EPSS
0%
Percentile
37.0
In the wild
Unconfirmed
What it is

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00438 · 37.0th percentile
Weakness
CWE-330 · Use of Insufficiently Random Values
Published
2022-06-06T02:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 5.17.95.17.9
References (14)
https://arxiv.org/abs/2209.12993 · [email protected]https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.9 · [email protected]https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c2c8f03a5ab7cb04ec64724d7d176d00bcc91e5 · [email protected]https://github.com/0xkol/rfc6056-device-tracker · [email protected]https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html · [email protected]https://www.debian.org/security/2022/dsa-5173 · [email protected]https://arxiv.org/abs/2209.12993 · af854a3a-2127-422b-91ae-364da2661108https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.9 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c2c8f03a5ab7cb04ec64724d7d176d00bcc91e5 · af854a3a-2127-422b-91ae-364da2661108https://github.com/0xkol/rfc6056-device-tracker · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2022/dsa-5173 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-419740.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 05 JUN 21:53Z
    The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used
    cvelistv5