CVE-2022-21742

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function. An unauthenticated LAN attacker can exploit this vulnerability to disrupt services.
References
Link Resource
https://www.twcert.org.tw/tw/cp-132-6057-1cd0d-1.html Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:realtek:rtl8156_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8156_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8156_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:realtek:rtl8156:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:realtek:rtl8156b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8156b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8156b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:realtek:rtl8156b:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:o:realtek:rtl8153_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8153_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8153_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:realtek:rtl8153:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:o:realtek:rtl8153b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8153b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8153b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:realtek:rtl8153b:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
OR cpe:2.3:o:realtek:rtl8154_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8154_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8154_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:realtek:rtl8154:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
OR cpe:2.3:o:realtek:rtl8154b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8154b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8154b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:realtek:rtl8154b:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
OR cpe:2.3:o:realtek:rtl8152b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8152b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:realtek:rtl8152b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:realtek:rtl8152b:-:*:*:*:*:*:*:*

Information

Published : 2022-06-19 23:15

Updated : 2022-07-05 13:40


NVD link : CVE-2022-21742

Mitre link : CVE-2022-21742


JSON object : View

CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Advertisement

dedicated server usa

Products Affected

realtek

  • rtl8154b_firmware
  • rtl8154_firmware
  • rtl8154b
  • rtl8152b
  • rtl8156
  • rtl8153b
  • rtl8156_firmware
  • rtl8156b
  • rtl8153
  • rtl8153b_firmware
  • rtl8154
  • rtl8153_firmware
  • rtl8152b_firmware
  • rtl8156b_firmware