Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).
References
| Link | Resource |
|---|---|
| https://github.com/umlaeute/v4l2loopback/commit/e4cd225557486c420f6a34411f98c575effd43dd | Patch Third Party Advisory |
| https://huntr.dev/bounties/1b055da5-7a9e-4409-99d7-030280d242d5 | Exploit Issue Tracking Patch Third Party Advisory |
| https://github.com/umlaeute/v4l2loopback/commit/e4cd225557486c420f6a34411f98c575effd43dd | Patch Third Party Advisory |
| https://huntr.dev/bounties/1b055da5-7a9e-4409-99d7-030280d242d5 | Exploit Issue Tracking Patch Third Party Advisory |
Configurations
History
21 Nov 2024, 07:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/umlaeute/v4l2loopback/commit/e4cd225557486c420f6a34411f98c575effd43dd - Patch, Third Party Advisory | |
| References | () https://huntr.dev/bounties/1b055da5-7a9e-4409-99d7-030280d242d5 - Exploit, Issue Tracking, Patch, Third Party Advisory |
10 Aug 2022, 13:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/umlaeute/v4l2loopback/commit/e4cd225557486c420f6a34411f98c575effd43dd - Patch, Third Party Advisory | |
| References | (CONFIRM) https://huntr.dev/bounties/1b055da5-7a9e-4409-99d7-030280d242d5 - Exploit, Issue Tracking, Patch, Third Party Advisory | |
| CPE | cpe:2.3:o:v4l2loopback_project:v4l2loopback:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.0 |
04 Aug 2022, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-04 10:15
Updated : 2024-11-21 07:01
NVD link : CVE-2022-2652
Mitre link : CVE-2022-2652
CVE.ORG link : CVE-2022-2652
JSON object : View
Products Affected
v4l2loopback_project
- v4l2loopback
CWE
CWE-134
Use of Externally-Controlled Format String