CVE-2022-3435

A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-210357 was assigned to this vulnerability.

• CWE-119

• https://lists.debian.org/debian-lts-announce/2022/12/msg00031.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/
• https://lore.kernel.org/netdev/20221005181257.8897-1-dsahern%40kernel.org/T/#u
• https://vuldb.com/?id.210357Patch, Permissions Required, Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2022/12/msg00031.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHENNMLCWIQV2LLA56BJNFIUZ7WB4IY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2KTU5LFZNQS7YNGE56MT46VHMXL3DD2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNN3VFQPECS6D4PS6ZWD7AFXTOSJDSSR/
• https://lore.kernel.org/netdev/20221005181257.8897-1-dsahern%40kernel.org/T/#u
• https://vuldb.com/?id.210357Patch, Permissions Required, Third Party Advisory, VDB Entry

Published

Oct 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3434A vulnerability was found in SourceCodester Web-Based Studen…5.4
• CVE-2022-34344Missing Authorization vulnerability in Rymera Web Co Wholesa…8.8
• CVE-2022-34345Improper input validation in the firmware for some Intel(R) …6.2
• CVE-2022-34346Out-of-bounds read in the Intel(R) Media SDK software before…7.8
• CVE-2022-34347Cross-Site Request Forgery (CSRF) vulnerability in W3 Eden D…8.8
• CVE-2022-34348IBM Sterling Partner Engagement Manager 6.1 is vulnerable to…7.1
• CVE-2022-34350IBM API Connect 10.0.0.0 through 10.0.5.0, 10.0.1.0 through …7.5
• CVE-2022-34351IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exp…7.5
• CVE-2022-34352 IBM QRadar SIEM 7.5.0 is vulnerable to information exposure…6.5
• CVE-2022-34354 IBM Sterling Partner Engagement Manager 2.0 allows encrypte…3.3
• CVE-2022-34355IBM Jazz Foundation (IBM Engineering Lifecycle Management 6.…5.5
• CVE-2022-34356IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privil…7.8