high7.5Public exploit code
CVE-2022-46770
qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of for…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- qubes-mirage-firewall v0.8.3 - Denial Of Service (DoS)2023-03-31 · dos · hardware
Impact
qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linuxfoundation | Mirage Firewall | from 0.8.0 before 0.8.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/171610/Qubes-Mirage-Firewall-0.8.3-Denial-Of-Service.html
- https://github.com/mirage/qubes-mirage-firewall/issues/166
- http://packetstormsecurity.com/files/171610/Qubes-Mirage-Firewall-0.8.3-Denial-Of-Service.html
- https://github.com/mirage/qubes-mirage-firewall/issues/166