CVE-2022-43589 - A null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Filter 20.0.8317

Back Back to CVE browser

MEDIUM

A null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Filter 20.0.8317

Published Nov 28, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 0.33%

Description

A null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability.

Affected products

Vendor Callback technologies Product CBFS Filter Default
unknown
Affected
- 20.0.8317

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Callback technologies	CBFS Filter	unknown	Affected 20.0.8317

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46585
Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1648
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46585		Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1648		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner talos

Published Nov 28, 2022

Updated Apr 15, 2025

Reserved Oct 21, 2022

Link CVE-2022-43589

CISA Vulnrichment

Updated Apr 15, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-43589

Red Hat

No data

ENISA EUVD

Assigner talos

Published Nov 28, 2022

Updated Apr 15, 2025

Link EUVD-2022-46585

GitHub

No data