What is CVE-2022-23087?

CVE-2022-23087 is a high-severity vulnerability in Freebsd, classified under Out-of-bounds Write. CVSS score: 8.8/10. Published 2024-02-15.

How severe is CVE-2022-23087?

High severity. CVSS v3 base score is 8.8 out of 10.

Is CVE-2022-23087 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Freebsd

CVE-2022-23087

The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These include the insertion of IP and TCP checksums, insertion of an Ethernet VLAN header, and TCP segmentation offload ("TSO…

Vulnerability class: Buffer Overflow

EPSS: 0.002 (11.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Freebsd — versions 13.1-RC1, 12.3-RELEASE, 13.0-RELEASE

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

Public proof-of-concept exploits

References

secteam@freebsd.org (vendor-advisory, Vendor Advisory)
secteam@freebsd.org (Third Party Advisory)

Frequently asked questions

What is CVE-2022-23087?: CVE-2022-23087 is a high-severity vulnerability in Freebsd, classified under Out-of-bounds Write. CVSS score: 8.8/10. Published 2024-02-15.
How severe is CVE-2022-23087?: High severity. CVSS v3 base score is 8.8 out of 10.
Is CVE-2022-23087 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.