Input validation error in Intel products - CVE-2022-36351

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU79526

Input validation error in Intel products - CVE-2022-36351

Published: August 15, 2023


Vulnerability identifier: #VU79526
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-36351
CWE-ID: CWE-20
Exploitation vector: Adjecent network
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker on the local network can send specially crafted data to the system and perform a denial of service (DoS) attack.


Affected software

Killer Wi-Fi 6 AX1650
Killer Wi-Fi 6E AX1690
Killer Wi-Fi 6E AX1675
Intel Wi-Fi 6 AX101
Intel Wi-Fi 6 AX201
Intel Wi-Fi 6 AX200
Intel Wi-Fi 6 AX203
Intel Wi-Fi 6E AX411
Intel Wi-Fi 6E AX211
Intel Wi-Fi 6E AX210
Oracle Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Fedora
iwl5150-firmware
iwl5000-firmware
iwl6000-firmware
iwl3945-firmware
iwl135-firmware
iwl2030-firmware
iwl2000-firmware
iwl105-firmware
iwl6000g2a-firmware
iwl6000g2b-firmware
iwl3160-firmware
iwl7260-firmware
iwl1000-firmware
iwl100-firmware
iwl6050-firmware
iwl4965-firmware
linux-firmware
linux-firmware (Red Hat package)

How to mitigate CVE-2022-36351

Install updates from vendor's website.

Killer Wi-Fi 6 AX1650 - update to 3.2.20.23023
Killer Wi-Fi 6E AX1690 - update to 3.2.20.23023
Killer Wi-Fi 6E AX1675 - update to 3.2.20.23023
Intel Wi-Fi 6 AX101 - update to 22.200
Intel Wi-Fi 6 AX201 - update to 22.200
Intel Wi-Fi 6 AX200 - update to 22.200
Intel Wi-Fi 6 AX203 - update to 22.200
Intel Wi-Fi 6E AX411 - update to 22.200
Intel Wi-Fi 6E AX211 - update to 22.200
Intel Wi-Fi 6E AX210 - update to 22.200
iwl5150-firmware - update to 8.24.2.2-83
iwl5000-firmware - update to 8.83.5.1_1-83
iwl6000-firmware - update to 9.221.4.1-83
iwl3945-firmware - update to 15.32.2.9-83
iwl135-firmware - update to 18.168.6.1-83
iwl2030-firmware - update to 18.168.6.1-83
iwl2000-firmware - update to 18.168.6.1-83
iwl105-firmware - update to 18.168.6.1-83
iwl6000g2a-firmware - update to 18.168.6.1-83
iwl6000g2b-firmware - update to 18.168.6.1-83
iwl3160-firmware - update to 25.30.13.0-83
iwl7260-firmware - update to 25.30.13.0-83
iwl1000-firmware - update to 39.31.5.1-83
iwl100-firmware - update to 39.31.5.1-83
iwl6050-firmware - update to 41.28.5.1-83
iwl4965-firmware - update to 228.61.2.24-83
linux-firmware - update to 20200421-83.git78c0348
linux-firmware (Red Hat package) - addressed in versions 20200421-83.git78c0348.el7_9, 20230814-140.el9_3
linux-firmware - addressed in versions 20230919-1.fc37, 20230919-1.fc38, 20230919-1.fc39

External References

Related Security Bulletins