Vulnerabilities > CVE-2022-46770 - Infinite Loop vulnerability in Linuxfoundation Mirage Firewall

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
linuxfoundation
CWE-835
NVD
Published: 2022-12-07
Updated: 2024-11-21

Summary

qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255).

Vulnerable Configurations

Part Description Count
Application
Linuxfoundation
4

Common Weakness Enumeration (CWE)

References