CVE-2022-40155: Buffer Overflow

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/236358
• https://www.ibm.com/support/pages/node/6846257 (Advisory)
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50428
• https://github.com/x-stream/xstream/issues/304
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2134299
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2134300
• https://access.redhat.com/security/cve/cve-2022-40155
• https://access.redhat.com/errata/RHSA-2023:0469
• https://bugzilla.redhat.com/show_bug.cgi?id=2134289
• https://www.cve.org/CVERecord?id=CVE-2022-40155 https://nvd.nist.gov/vuln/detail/CVE-2022-40155

Parent vulnerabilities

(Appears in the following advisories)

• RHSA-2023:0469
• IBM-6846257

Frequently Asked Questions

• What is CVE-2022-40155?

  CVE-2022-40155 is a vulnerability in the XStream package that allows an attacker to cause a denial of service by triggering a stack-based buffer overflow.

• How does CVE-2022-40155 affect IBM Disconnected Log Collector?

  CVE-2022-40155 affects IBM Disconnected Log Collector versions v1.0 to v1.8.2, allowing a remote authenticated attacker to crash the parser and cause a denial of service.

• How severe is CVE-2022-40155?

  CVE-2022-40155 has a severity rating of high.

• How can an attacker exploit CVE-2022-40155?

  An attacker can exploit CVE-2022-40155 by sending a specially-crafted XML data to trigger the stack-based buffer overflow and crash the parser.

• What is the Common Weakness Enumeration (CWE) for CVE-2022-40155?

  The CWEs associated with CVE-2022-40155 are CWE-787 (Out-of-bounds Write) and CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).