Vulnerabilities > CVE-2022-2652 - Unspecified vulnerability in V4L2Loopback Project V4L2Loopback

CVSS 6.0 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

v4l2loopback-project

NVD

Published: 2022-08-04

Updated: 2024-11-21

Summary

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).

Vulnerable Configurations

Part	Description	Count
OS	V4L2Loopback_Project V4L2Loopback Project V4L2Loopback 0.1 V4L2Loopback Project V4L2Loopback 0.2 V4L2Loopback Project V4L2Loopback 0.3 V4L2Loopback Project V4L2Loopback 0.3.1 V4L2Loopback Project V4L2Loopback 0.4.0 V4L2Loopback Project V4L2Loopback 0.4.1 V4L2Loopback Project V4L2Loopback 0.5.0 V4L2Loopback Project V4L2Loopback 0.6.0 V4L2Loopback Project V4L2Loopback 0.6.1 V4L2Loopback Project V4L2Loopback 0.6.2 V4L2Loopback Project V4L2Loopback 0.6.3 V4L2Loopback Project V4L2Loopback 0.7.0 V4L2Loopback Project V4L2Loopback 0.7.1 V4L2Loopback Project V4L2Loopback 0.8.0 V4L2Loopback Project V4L2Loopback 0.9.0 V4L2Loopback Project V4L2Loopback 0.9.1 V4L2Loopback Project V4L2Loopback 0.10.0 V4L2Loopback Project V4L2Loopback 0.11.0 V4L2Loopback Project V4L2Loopback 0.12.0 V4L2Loopback Project V4L2Loopback 0.12.1 V4L2Loopback Project V4L2Loopback 0.12.2 V4L2Loopback Project V4L2Loopback 0.12.3 V4L2Loopback Project V4L2Loopback 0.12.4 V4L2Loopback Project V4L2Loopback 0.12.5	24

Summary

Vulnerable Configurations

References