Executive Summary

Informations
Name CVE-2022-49845 First vendor Publication 2025-05-01
Vendor Cve Last vendor Modification 2025-05-07

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

can: j1939: j1939_send_one(): fix missing CAN header initialization

The read access to struct canxl_frame::len inside of a j1939 created skbuff revealed a missing initialization of reserved and later filled elements in struct can_frame.

This patch initializes the 8 byte CAN header with zero.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49845

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3564

Sources (Detail)

https://git.kernel.org/stable/c/2719f82ad5d8199cf5f346ea8bb3998ad5323b72
https://git.kernel.org/stable/c/3eb3d283e8579a22b81dd2ac3987b77465b2a22f
https://git.kernel.org/stable/c/69e86c6268d59ceddd0abe9ae8f1f5296f316c3c
https://git.kernel.org/stable/c/d0513b095e1ef1469718564dec3fb3348556d0a8
https://git.kernel.org/stable/c/f8e0edeaa0f2b860bdbbf0aafb4492533043d650
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
Date Informations
2025-06-24 02:14:58
  • Multiple Updates
2025-05-27 13:23:59
  • Multiple Updates
2025-05-27 02:12:10
  • First insertion