CVE-2022-32296
נמוכה 3.3
תיאור (מקור, אנגלית)
The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.
מדדים
- CVSS 3.1
-
3.3 (LOW)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - EPSS — סבירות ניצול
- 0% (אחוזון 000) נכון ל-15/10/2026
- CWE
- CWE-330
מוצרים מושפעים
linux: linux kernel
קישורים
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.9 Release NotesVendor Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c2… Mailing ListPatchVendor Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.9 Release NotesVendor Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4c2… Mailing ListPatchVendor Advisory
- https://arxiv.org/abs/2209.12993
- https://github.com/0xkol/rfc6056-device-tracker
- https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
- https://www.debian.org/security/2022/dsa-5173
- https://arxiv.org/abs/2209.12993
- https://github.com/0xkol/rfc6056-device-tracker