Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-5xtu-e6dr-97hb

Summary kernel: netfilter: nf_tables: incorrect NFT_STATEFUL_EXPR check leads to a use-after-free (write)

Aliases

alias	CVE-2022-1966

Fixed_packages

url	pkg:alpm/archlinux/linux@5.18.2-1
purl	pkg:alpm/archlinux/linux@5.18.2-1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux@5.18.2-1

url	pkg:alpm/archlinux/linux-hardened@5.17.13.hardened1-1
purl	pkg:alpm/archlinux/linux-hardened@5.17.13.hardened1-1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux-hardened@5.17.13.hardened1-1

url	pkg:alpm/archlinux/linux-lts@5.15.45-1
purl	pkg:alpm/archlinux/linux-lts@5.15.45-1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux-lts@5.15.45-1

url	pkg:alpm/archlinux/linux-zen@5.18.2.zen1-1
purl	pkg:alpm/archlinux/linux-zen@5.18.2.zen1-1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux-zen@5.18.2.zen1-1

Affected_packages

url pkg:alpm/archlinux/linux@5.18.1-1

purl pkg:alpm/archlinux/linux@5.18.1-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-39b6-wnhk-1uhn

vulnerability	VCID-5xtu-e6dr-97hb

vulnerability	VCID-e1ec-jsa3-nkeq

vulnerability	VCID-phz7-1zx1-r3bu

vulnerability	VCID-qb79-b4zu-sufz

resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux@5.18.1-1

url pkg:alpm/archlinux/linux-hardened@5.17.12.hardened2-2

purl pkg:alpm/archlinux/linux-hardened@5.17.12.hardened2-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-39b6-wnhk-1uhn

vulnerability	VCID-5xtu-e6dr-97hb

vulnerability	VCID-e1ec-jsa3-nkeq

vulnerability	VCID-phz7-1zx1-r3bu

vulnerability	VCID-qb79-b4zu-sufz

resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux-hardened@5.17.12.hardened2-2

url pkg:alpm/archlinux/linux-lts@5.15.44-1

purl pkg:alpm/archlinux/linux-lts@5.15.44-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-39b6-wnhk-1uhn

vulnerability	VCID-5xtu-e6dr-97hb

vulnerability	VCID-e1ec-jsa3-nkeq

vulnerability	VCID-p9fd-1vjw-dbg4

vulnerability	VCID-phz7-1zx1-r3bu

vulnerability	VCID-qb79-b4zu-sufz

resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux-lts@5.15.44-1

url pkg:alpm/archlinux/linux-zen@5.18.1.zen1-1

purl pkg:alpm/archlinux/linux-zen@5.18.1.zen1-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-39b6-wnhk-1uhn

vulnerability	VCID-5xtu-e6dr-97hb

vulnerability	VCID-e1ec-jsa3-nkeq

vulnerability	VCID-phz7-1zx1-r3bu

vulnerability	VCID-qb79-b4zu-sufz

resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/linux-zen@5.18.1.zen1-1

url pkg:rpm/redhat/kernel@3.10.0-1160.71.1?arch=el7

purl pkg:rpm/redhat/kernel@3.10.0-1160.71.1?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5xtu-e6dr-97hb

vulnerability	VCID-gkac-yybb-pqdv

vulnerability	VCID-qfza-xn49-hyf1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kernel@3.10.0-1160.71.1%3Farch=el7

url pkg:rpm/redhat/kernel@4.18.0-193.87.1?arch=el8_2

purl pkg:rpm/redhat/kernel@4.18.0-193.87.1?arch=el8_2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3wju-yesf-fbeu

vulnerability	VCID-5c6z-1ebs-wfev

vulnerability	VCID-5xtu-e6dr-97hb

vulnerability	VCID-gkac-yybb-pqdv

vulnerability	VCID-qecv-tvzh-8uat

vulnerability	VCID-qfza-xn49-hyf1

vulnerability	VCID-qr9t-hvpr-17dd

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kernel@4.18.0-193.87.1%3Farch=el8_2

url pkg:rpm/redhat/kernel@5.14.0-70.17.1?arch=el9_0

purl pkg:rpm/redhat/kernel@5.14.0-70.17.1?arch=el9_0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5c6z-1ebs-wfev

vulnerability	VCID-5xtu-e6dr-97hb

vulnerability	VCID-gkac-yybb-pqdv

vulnerability	VCID-n8pj-dxe6-hkc9

vulnerability	VCID-qfza-xn49-hyf1

vulnerability	VCID-qr9t-hvpr-17dd

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kernel@5.14.0-70.17.1%3Farch=el9_0

url pkg:rpm/redhat/kernel-rt@3.10.0-1160.71.1.rt56.1212?arch=el7

purl pkg:rpm/redhat/kernel-rt@3.10.0-1160.71.1.rt56.1212?arch=el7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5xtu-e6dr-97hb

vulnerability	VCID-gkac-yybb-pqdv

vulnerability	VCID-qfza-xn49-hyf1

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kernel-rt@3.10.0-1160.71.1.rt56.1212%3Farch=el7

url pkg:rpm/redhat/kernel-rt@4.18.0-193.87.1.rt13.137?arch=el8_2

purl pkg:rpm/redhat/kernel-rt@4.18.0-193.87.1.rt13.137?arch=el8_2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5c6z-1ebs-wfev

vulnerability	VCID-5xtu-e6dr-97hb

vulnerability	VCID-gkac-yybb-pqdv

vulnerability	VCID-qecv-tvzh-8uat

vulnerability	VCID-qfza-xn49-hyf1

vulnerability	VCID-qr9t-hvpr-17dd

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kernel-rt@4.18.0-193.87.1.rt13.137%3Farch=el8_2

url pkg:rpm/redhat/kernel-rt@5.14.0-70.17.1.rt21.89?arch=el9_0

purl pkg:rpm/redhat/kernel-rt@5.14.0-70.17.1.rt21.89?arch=el9_0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5c6z-1ebs-wfev

vulnerability	VCID-5xtu-e6dr-97hb

vulnerability	VCID-gkac-yybb-pqdv

vulnerability	VCID-qfza-xn49-hyf1

vulnerability	VCID-qr9t-hvpr-17dd

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/kernel-rt@5.14.0-70.17.1.rt21.89%3Farch=el9_0

url pkg:rpm/redhat/redhat-virtualization-host@4.3.23-20220622.0?arch=el7_9

purl pkg:rpm/redhat/redhat-virtualization-host@4.3.23-20220622.0?arch=el7_9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3adf-qttu-3kfd

vulnerability	VCID-5xtu-e6dr-97hb

vulnerability	VCID-gkac-yybb-pqdv

vulnerability	VCID-xd6j-x83x-r3gn

vulnerability	VCID-ybfq-unp3-dbav

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/redhat-virtualization-host@4.3.23-20220622.0%3Farch=el7_9

References

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1966.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1966.json

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	7.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2093146
reference_id	2093146
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2093146

reference_url

https://security.archlinux.org/AVG-2751

reference_id

AVG-2751

reference_type

scores

value	High
scoring_system	archlinux
scoring_elements

url

https://security.archlinux.org/AVG-2751

reference_url

https://security.archlinux.org/AVG-2752

reference_id

AVG-2752

reference_type

scores

value	High
scoring_system	archlinux
scoring_elements

url

https://security.archlinux.org/AVG-2752

reference_url

https://security.archlinux.org/AVG-2753

reference_id

AVG-2753

reference_type

scores

value	High
scoring_system	archlinux
scoring_elements

url

https://security.archlinux.org/AVG-2753

reference_url

https://security.archlinux.org/AVG-2754

reference_id

AVG-2754

reference_type

scores

value	High
scoring_system	archlinux
scoring_elements

url

https://security.archlinux.org/AVG-2754

reference_url	https://access.redhat.com/errata/RHSA-2022:5214
reference_id	RHSA-2022:5214
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2022:5214

reference_url	https://access.redhat.com/errata/RHSA-2022:5216
reference_id	RHSA-2022:5216
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2022:5216

reference_url	https://access.redhat.com/errata/RHSA-2022:5220
reference_id	RHSA-2022:5220
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2022:5220

reference_url	https://access.redhat.com/errata/RHSA-2022:5224
reference_id	RHSA-2022:5224
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2022:5224

reference_url	https://access.redhat.com/errata/RHSA-2022:5232
reference_id	RHSA-2022:5232
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2022:5232

reference_url	https://access.redhat.com/errata/RHSA-2022:5236
reference_id	RHSA-2022:5236
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2022:5236

reference_url	https://access.redhat.com/errata/RHSA-2022:5249
reference_id	RHSA-2022:5249
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2022:5249

reference_url	https://access.redhat.com/errata/RHSA-2022:5267
reference_id	RHSA-2022:5267
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2022:5267

reference_url	https://access.redhat.com/errata/RHSA-2022:5439
reference_id	RHSA-2022:5439
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2022:5439

reference_url	https://access.redhat.com/errata/RHSA-2022:5476
reference_id	RHSA-2022:5476
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2022:5476

reference_url	https://usn.ubuntu.com/5465-1/
reference_id	USN-5465-1
reference_type
scores
url	https://usn.ubuntu.com/5465-1/

reference_url	https://usn.ubuntu.com/5466-1/
reference_id	USN-5466-1
reference_type
scores
url	https://usn.ubuntu.com/5466-1/

reference_url	https://usn.ubuntu.com/5467-1/
reference_id	USN-5467-1
reference_type
scores
url	https://usn.ubuntu.com/5467-1/

reference_url	https://usn.ubuntu.com/5468-1/
reference_id	USN-5468-1
reference_type
scores
url	https://usn.ubuntu.com/5468-1/

reference_url	https://usn.ubuntu.com/5469-1/
reference_id	USN-5469-1
reference_type
scores
url	https://usn.ubuntu.com/5469-1/

reference_url	https://usn.ubuntu.com/5470-1/
reference_id	USN-5470-1
reference_type
scores
url	https://usn.ubuntu.com/5470-1/

reference_url	https://usn.ubuntu.com/5471-1/
reference_id	USN-5471-1
reference_type
scores
url	https://usn.ubuntu.com/5471-1/

Weaknesses

cwe_id	416
name	Use After Free
description	Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

Exploits

Severity_range_score 7.0 - 8.9

Exploitability 0.5

Weighted_severity 8.0

Risk_score 4.0

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5xtu-e6dr-97hb

Vulnerability Instance