CVE-2022-28733

CVE Details

Release Date:	2022-06-07
Impact:	Important	What is this?

Description

Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Under certain circumstances the total_len value may end up wrapping around to a small integer number which will be used in memory allocation. If the attack succeeds in such way, subsequent operations can write past the end of the buffer.

See more information about CVE-2022-28733 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v3 metrics

Base Score:	8.1
Vector String:	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Version:	3.0
Attack Vector:	Network
Attack Complexity:	High
Privileges Required:	None
User Interaction:	None
Scope:	Unchanged
Confidentiality Impact:	High
Integrity Impact:	High
Availability Impact:	High

Errata information

Platform	Errata	Release Date
Oracle Linux version 7 (grub2)	ELSA-2022-9469	2022-06-07
Oracle Linux version 7 (grub2)	ELSA-2023-12952	2023-10-27
Oracle Linux version 8 (grub2)	ELSA-2022-5095	2022-07-04
Oracle Linux version 8 (grub2)	ELSA-2022-9471	2022-06-07
Oracle Linux version 8 (grub2)	ELSA-2022-9595	2022-07-14
Oracle Linux version 9 (grub2)	ELSA-2022-5099	2022-06-30
Oracle Linux version 9 (grub2)	ELSA-2022-9596	2022-07-14