CVE-2022-32296

LowCVSS 3.3/10Last modified Oct 14, 2026

Description

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-330

Affected software

No affected versions have been published.

Timeline

Published
Jun 5, 2022
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-322977.5Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function.CVE-2022-322987.5Toybox v0.8.7 was discovered to contain a NULL pointer dereference via the component httpd.c. This vulnerability can lead to a Denial of SerCVE-2022-322998.8YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at /App/Lib/Action/Admin/SiteAction.class.phpCVE-2022-323008.8YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.cCVE-2022-323019.8YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.pCVE-2022-323028.8Theme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edit_ticket.php.CVE-2022-323086.1Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofeCVE-2022-32315.4Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0.CVE-2022-323109.8An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request toCVE-2022-323119.8Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stocks/vCVE-2022-323175.5The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vo_v4l2CVE-2022-323185.4Fast Food Ordering System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the component /ffos/class
CVE-2022-32296: Low severity, CVSS 3.3 | Vulnix