{"id":"CVE-2022-27666","published":"2022-03-23T05:07:01Z","modified":"2024-08-03T05:32:59Z","title":"A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.05524,"percentile":0.9279,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":9,"pulses":[{"name":"Dirty Frag Exploit Grants Root Access on Major Linux Distributions","url":"https://otx.alienvault.com/pulse/69ff4c25f503b1eb1ee8cd69","created":"2026-05-09"},{"name":"Russian Military Cyber Actors Target US and Global Critical Infrastructure","url":"https://otx.alienvault.com/pulse/66f126dd559ebfb24ccbd49f","created":"2024-09-23"},{"name":"Russian Military Cyber Actors Target US and Global Critical Infrastructure","url":"https://otx.alienvault.com/pulse/66e3e60aa174e545398979fb","created":"2024-09-13"},{"name":"Russian Military Cyber Actors Target US and Global Critical Infrastructure","url":"https://otx.alienvault.com/pulse/66deab9db2c98c27aa4b5576","created":"2024-09-09"},{"name":"Russian Military Cyber Actors Target US and Global Critical Infrastructure | CISA","url":"https://otx.alienvault.com/pulse/66dae136fe855042399d3e28","created":"2024-09-06"},{"name":"ACTUALIZACION | seguridad de Android de agosto de 2022,","url":"https://otx.alienvault.com/pulse/62fd34531eb0ac5aae90e12f","created":"2022-08-17"},{"name":"Actualización de seguridad para el kernel de Linux | SUSE","url":"https://otx.alienvault.com/pulse/625efc8658db58d3dc0f9572","created":"2022-04-19"},{"name":"Actualización de seguridad para el Kernel de Linux (Live Patch 4 para SLE 15 SP3) | SUSE","url":"https://otx.alienvault.com/pulse/625d5fa58880683c23ccd932","created":"2022-04-18"},{"name":"ACTUALIZACION | de seguridad para el Kernel de Linux (Live Patch 25 para SLE 15) | SUSE","url":"https://otx.alienvault.com/pulse/625c407c89a54002338f86cb","created":"2022-04-17"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061633","tags":["x_refsource_MISC"]},{"url":"https://github.com/torvalds/linux/commit/ebe48d368e97d007bfeb76fcb065d6cfc4c96645","tags":["x_refsource_MISC"]},{"url":"https://security.netapp.com/advisory/ntap-20220429-0001/","tags":["x_refsource_CONFIRM"]},{"url":"https://www.debian.org/security/2022/dsa-5127","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://www.debian.org/security/2022/dsa-5173","tags":["vendor-advisory","x_refsource_DEBIAN"]}],"techniques":[],"reports":[{"id":"SRC-cb049733b1fc717427aa","title":"Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure","publisher":"cisa.gov","url":"https://www.cisa.gov/sites/default/files/2024-09/aa24-249a-russian-military-cyber-actors-target-us-and-global-critical-infrastructure.pdf","date":null,"mentions":[{"quote":"following CVEs:\r\n CVE-2020-1472 (Microsoft: Windows Server)\r\n CVE-2021-26084 (Atlassian Confluence Server and Data Center)\r\n CVE-2021-3156 (Red Hat: Privilege Escalation via Command Line Argument Parsing)\r\n CVE-2021-4034 (Red Hat: Polkit Privilege Escalation)\r\n CVE-2022-27666 (Red Hat: Heap Buffer Overflow","start":9703,"end":10015},{"quote":" NIST NVD: CVE-2022-27666","start":36963,"end":36989}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2022-32163","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-32163","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":2,"skipped":1,"earliest":"2022-03-23","earliestUrl":"https://github.com/plummm/CVE-2022-27666","repos":[{"name":"plummm/CVE-2022-27666","url":"https://github.com/plummm/CVE-2022-27666","stars":207,"created":"2022-03-23"},{"name":"Albocoder/cve-2022-27666-exploits","url":"https://github.com/Albocoder/cve-2022-27666-exploits","stars":2,"created":"2023-04-11"}]},"first":{"date":"2022-03-23","source":"PoC-in-GitHub","url":"https://github.com/plummm/CVE-2022-27666"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2022-03-23","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2022-27666","provenance":"source"},{"date":"2022-03-23","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/plummm/CVE-2022-27666","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":29.7,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":18.56,"detail":"percentile 0.9279"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"2 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":2.27,"detail":"9 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}