CVE-2022-1841: Out-of-bound write in tcp_flags
Published Aug 31, 2022
·Updated
In subsys/net/ip/tcp.c , function tcpflags , when the incoming parameter flags is ECN or CWR , the buf will out-of-bounds write a byte zero.
Affected Software
1 affected component
zephyrproject zephyr<=3.0.0
Remediation
Event History
Aug 31, 2022
CVE Published
via MITRE·07:40 PM
Data Sourced
via MITRE·07:40 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-1841?
CVE-2022-1841 is a vulnerability in the Zephyr Project's Zephyr software, specifically in the subsys/net/ip/tcp.c file.
2
What is the severity of CVE-2022-1841?
CVE-2022-1841 has a severity rating of 5.3, which is considered high.
3
How does CVE-2022-1841 affect Zephyr Project's Zephyr software?
CVE-2022-1841 affects Zephyr Project's Zephyr software version 3.0.0 and earlier, causing an out-of-bounds write of a zero byte in the subsys/net/ip/tcp.c file when the 'flags' parameter is ECN or CWR.
4
What is the Common Weakness Enumeration (CWE) number associated with CVE-2022-1841?
CVE-2022-1841 is associated with CWE-787.
5
How do I fix the CVE-2022-1841 vulnerability in Zephyr Project's Zephyr software?
To fix the CVE-2022-1841 vulnerability, you should update Zephyr Project's Zephyr software to a version later than 3.0.0.