CVE-2022-27666

HighCVSS 7.8/10Last modified Sep 1, 2026

Description

A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Mar 23, 2022
Last modified: Sep 1, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-276677.5Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console (CMC) - version 430, allows an attac CVE-2022-276689.8Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute CVE-2022-276697.5An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to whic CVE-2022-27676.1A vulnerability classified as problematic has been found in SourceCodester Online Admission System. This affects an unknown part of the file CVE-2022-276706.5SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server CVE-2022-276716.5A CSRF token visible in the URL may possibly lead to information disclosure vulnerability.CVE-2022-276724.7When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode CVE-2022-276737.5Insufficient access controls in the AMD Link Android app may potentially result in information disclosure.CVE-2022-276747.5Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a CVE-2022-276777.8Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low privileges to modify files potentiall CVE-2022-27686.1A vulnerability classified as problematic was found in SourceCodester Library Management System. This vulnerability affects unknown code of CVE-2022-27695.4A vulnerability, which was classified as problematic, has been found in SourceCodester Company Website CMS. This issue affects some unknown