Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request (reproduce e.g. with many %s modifiers in a row).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack     memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when     providing the card label on request (reproduce e.g. with many %s modifiers in a row). (CVE-2022-2652)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10160-1 advisory.

  - Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack     memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when     providing the card label on request (reproduce e.g. with many %s modifiers in a row). (CVE-2022-2652)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10159-1 advisory.

  - Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack     memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when     providing the card label on request (reproduce e.g. with many %s modifiers in a row). (CVE-2022-2652)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
224528	Linux Distros Unpatched Vulnerability : CVE-2022-2652	Nessus	Misc.	Local	medium
166362	openSUSE 15 Security Update : v4l2loopback (openSUSE-SU-2022:10160-1)	Nessus	SuSE Local Security Checks	Local	medium
166361	openSUSE 15 Security Update : v4l2loopback (openSUSE-SU-2022:10159-1)	Nessus	SuSE Local Security Checks	Local	medium

Detections

Analytics

CVE-2022-2652

medium

Tenable Plugins

medium

medium

medium