An Off-by-one Error occurs in cmr113_decode of rtl_433 21.12 when decoding a crafted file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An Off-by-one Error occurs in cmr113_decode of rtl_433 21.12 when decoding a crafted file.
    (CVE-2022-25051)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - rtl_433 21.12 was discovered to contain a stack overflow in the function somfy_iohc_decode(). This
    vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. (CVE-2022-25050)

  - An Off-by-one Error occurs in cmr113_decode of rtl_433 21.12 when decoding a crafted file.
    (CVE-2022-25051)

  - rtl_433 21.12 was discovered to contain a stack overflow in the function acurite_00275rm_decode at
    /devices/acurite.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted
    file. (CVE-2022-27419)

ID	Name	Product	Family	Severity
224538	Linux Distros Unpatched Vulnerability : CVE-2022-25051	Nessus	Misc.	medium
406963	Alpine: multiple rtl_433 packages: security update to 21.12-r3	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
406963	Alpine: multiple rtl_433 packages: security update to 21.12-r3	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
409879	Alpine: multiple rtl_433 packages: security update to 21.12-r2 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
409879	Alpine: multiple rtl_433 packages: security update to 21.12-r2 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium

Detections

Analytics

CVE-2022-25051

medium

Tenable Plugins

medium

medium

medium

medium

medium