CVE-2022-0485: redhat enterprise_linux Unchecked Return Value

CVSS: 4.8v3.1MediumModified

AliasesRHSA-2022:2181UBUNTU-CVE-2022-0485DEBIAN-CVE-2022-0485+3 more

Published 29-08-2022Last modified 02-08-2024

Vulnerability summary

CVE-2022-0485 is a medium (CVSS 4.8) Unchecked Return Value vulnerability in redhat enterprise_linux. EPSS estimates a 0.97% chance of exploitation in the next 30 days, higher than 61.4% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

29/100

0100

Medium · default modelHow is this calculated?

CVSS score

4.8/10

010

Medium · v3.1 (NVD)

EPSS score

0.97%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 3

RHSA-2022:0949 RHSA-2022:0971 RHSA-2022:1759

Timeline

29-08-2022
PublishedVulnerability first disclosed.
02-08-2024
Last modifiedVulnerability information updated.

Description

A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as successful, rather than checking the *error parameter. This could result in the silent creation of a corrupted destination image.

CVSS metrics

4 scores · 4 sources · 1 version

v3.14.8

EPSS trend

Probability

0.97%

Chance of exploitation in the next 30 days

Percentile

61%

Versus all other CVEs

30-day change

0.00 pp

From 0.97% on 20-09-2026

20-09-202620-10-2026

EPSS score

0.97%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-252Unchecked Return ValueThe product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

Affected systems

Redhat195 products

enterprise_linux8.0
libnbd< 1.11.8
hivex< 0:1.3.18-23.module+el8.6.0+12721+8d053ff2
hivex-debuginfo< 0:1.3.18-23.module+el8.6.0+12721+8d053ff2
hivex-debugsource< 0:1.3.18-23.module+el8.6.0+12721+8d053ff2

hivex-devel< 0:1.3.18-23.module+el8.6.0+12721+8d053ff2
libguestfs< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-appliance< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-bash-completion< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-debuginfo< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-debugsource< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-devel< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-gfs2< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-gobject< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-gobject-debuginfo< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-gobject-devel< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-inspect-icons< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-java< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-java-debuginfo< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-java-devel< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-javadoc< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-man-pages-ja< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-man-pages-uk< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-rescue< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-rsync< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-tools< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-tools-c< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-tools-c-debuginfo< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libguestfs-winsupport< 0:8.6-1.module+el8.6.0+12721+8d053ff2
libguestfs-xfs< 1:1.44.0-5.module+el8.6.0+13879+1439f356
libiscsi< 0:1.18.0-8.module+el8.4.0+8855+a9e237a9
libiscsi-debuginfo< 0:1.18.0-8.module+el8.4.0+8855+a9e237a9
libiscsi-debugsource< 0:1.18.0-8.module+el8.4.0+8855+a9e237a9
libiscsi-devel< 0:1.18.0-8.module+el8.4.0+8855+a9e237a9
libiscsi-utils< 0:1.18.0-8.module+el8.4.0+8855+a9e237a9
libiscsi-utils-debuginfo< 0:1.18.0-8.module+el8.4.0+8855+a9e237a9
libnbd< 0:1.6.0-5.module+el8.6.0+14167+61b0e671
libnbd-bash-completion< 0:1.6.0-5.module+el8.6.0+14167+61b0e671
libnbd-debuginfo< 0:1.6.0-5.module+el8.6.0+14167+61b0e671
libnbd-debugsource< 0:1.6.0-5.module+el8.6.0+14167+61b0e671
libnbd-devel< 0:1.6.0-5.module+el8.6.0+14167+61b0e671
libtpms< 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.6.0+13879+1439f356
libtpms-debuginfo< 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.6.0+13879+1439f356
libtpms-debugsource< 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.6.0+13879+1439f356
libtpms-devel< 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.6.0+13879+1439f356
libvirt< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-client< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-client-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-config-network< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-config-nwfilter< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-interface< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-interface-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-network< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-network-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-nodedev< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-nodedev-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-nwfilter< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-nwfilter-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-qemu< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-qemu-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-secret< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-secret-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-core< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-core-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-disk< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-disk-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-gluster< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-gluster-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-iscsi< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-iscsi-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-iscsi-direct< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-iscsi-direct-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-logical< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-logical-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-mpath< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-mpath-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-rbd< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-rbd-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-scsi< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-driver-storage-scsi-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-daemon-kvm< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-dbus< 0:1.3.0-2.module+el8.6.0+12721+8d053ff2
libvirt-dbus-debuginfo< 0:1.3.0-2.module+el8.6.0+12721+8d053ff2
libvirt-dbus-debugsource< 0:1.3.0-2.module+el8.6.0+12721+8d053ff2
libvirt-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-debugsource< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-devel< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-docs< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-libs< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-libs-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-lock-sanlock< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-lock-sanlock-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-nss< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-nss-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-python< 0:8.0.0-1.module+el8.6.0+13896+a8fa8f67
libvirt-python-debugsource< 0:8.0.0-1.module+el8.6.0+13896+a8fa8f67
libvirt-wireshark< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
libvirt-wireshark-debuginfo< 0:8.0.0-5.module+el8.6.0+14495+7194fa43
lua-guestfs< 1:1.44.0-5.module+el8.6.0+13879+1439f356
lua-guestfs-debuginfo< 1:1.44.0-5.module+el8.6.0+13879+1439f356
nbdfuse< 0:1.6.0-5.module+el8.6.0+14167+61b0e671
nbdfuse-debuginfo< 0:1.6.0-5.module+el8.6.0+14167+61b0e671
nbdkit< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-bash-completion< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-basic-filters< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-basic-filters-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-basic-plugins< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-basic-plugins-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-curl-plugin< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-curl-plugin-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-debugsource< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-devel< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-example-plugins< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-example-plugins-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-gzip-filter< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-gzip-filter-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-gzip-plugin< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-gzip-plugin-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-linuxdisk-plugin< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-linuxdisk-plugin-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-nbd-plugin< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-nbd-plugin-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-python-plugin< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-python-plugin-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-server< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-server-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-ssh-plugin< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-ssh-plugin-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-tar-filter< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-tar-filter-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-tar-plugin< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-tar-plugin-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-tmpdisk-plugin< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-tmpdisk-plugin-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-vddk-plugin< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-vddk-plugin-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-xz-filter< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
nbdkit-xz-filter-debuginfo< 0:1.24.0-4.module+el8.6.0+14167+61b0e671
netcf< 0:0.2.8-12.module+el8.4.0+8855+a9e237a9
netcf-debuginfo< 0:0.2.8-12.module+el8.4.0+8855+a9e237a9
netcf-debugsource< 0:0.2.8-12.module+el8.4.0+8855+a9e237a9
netcf-devel< 0:0.2.8-12.module+el8.4.0+8855+a9e237a9
netcf-libs< 0:0.2.8-12.module+el8.4.0+8855+a9e237a9
netcf-libs-debuginfo< 0:0.2.8-12.module+el8.4.0+8855+a9e237a9
ocaml-hivex< 0:1.3.18-23.module+el8.6.0+12721+8d053ff2
ocaml-hivex-debuginfo< 0:1.3.18-23.module+el8.6.0+12721+8d053ff2
ocaml-hivex-devel< 0:1.3.18-23.module+el8.6.0+12721+8d053ff2
ocaml-libguestfs< 1:1.44.0-5.module+el8.6.0+13879+1439f356
ocaml-libguestfs-debuginfo< 1:1.44.0-5.module+el8.6.0+13879+1439f356
ocaml-libguestfs-devel< 1:1.44.0-5.module+el8.6.0+13879+1439f356
ocaml-libnbd< 0:1.6.0-5.module+el8.6.0+14167+61b0e671
ocaml-libnbd-debuginfo< 0:1.6.0-5.module+el8.6.0+14167+61b0e671
ocaml-libnbd-devel< 0:1.6.0-5.module+el8.6.0+14167+61b0e671
perl-hivex< 0:1.3.18-23.module+el8.6.0+12721+8d053ff2
perl-hivex-debuginfo< 0:1.3.18-23.module+el8.6.0+12721+8d053ff2
perl-Sys-Guestfs< 1:1.44.0-5.module+el8.6.0+13879+1439f356
perl-Sys-Guestfs-debuginfo< 1:1.44.0-5.module+el8.6.0+13879+1439f356
perl-Sys-Virt< 0:8.0.0-1.module+el8.6.0+13896+a8fa8f67
perl-Sys-Virt-debuginfo< 0:8.0.0-1.module+el8.6.0+13896+a8fa8f67
perl-Sys-Virt-debugsource< 0:8.0.0-1.module+el8.6.0+13896+a8fa8f67
python3-hivex< 0:1.3.18-23.module+el8.6.0+12721+8d053ff2
python3-hivex-debuginfo< 0:1.3.18-23.module+el8.6.0+12721+8d053ff2
python3-libguestfs< 1:1.44.0-5.module+el8.6.0+13879+1439f356
python3-libguestfs-debuginfo< 1:1.44.0-5.module+el8.6.0+13879+1439f356
python3-libnbd< 0:1.6.0-5.module+el8.6.0+14167+61b0e671
python3-libnbd-debuginfo< 0:1.6.0-5.module+el8.6.0+14167+61b0e671
python3-libvirt< 0:8.0.0-1.module+el8.6.0+13896+a8fa8f67
python3-libvirt-debuginfo< 0:8.0.0-1.module+el8.6.0+13896+a8fa8f67
qemu-guest-agent< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-guest-agent-debuginfo< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-img< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-img-debuginfo< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-block-curl< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-block-curl-debuginfo< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-block-gluster< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-block-gluster-debuginfo< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-block-iscsi< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-block-iscsi-debuginfo< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-block-rbd< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-block-rbd-debuginfo< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-block-ssh< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-block-ssh-debuginfo< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-common< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-common-debuginfo< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-core< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-core-debuginfo< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-debuginfo< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-debugsource< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-docs< 15:6.2.0-11.module+el8.6.0+14712+f96656d3
qemu-kvm-hw-usbredir< 15:6.2.0-11.module+el8.6.0+14712+f96656d3

Show all 195

Opensuse3 products

libnbd&distro=openSUSE Leap 15.3< 1.9.3-150300.8.9.1 | < 1.12.4-150300.8.12.1
libnbd&distro=openSUSE Leap 15.4< 1.9.3-150300.8.9.1 | < 1.12.4-150300.8.12.1
libnbd&distro=openSUSE Tumbleweed< 1.10.4-1.1

Debian1 product

libnbd< 1.10.5-1

Ubuntu1 product

libnbdAll versions (No fix recorded)

4 vendors · 200 products · Showing 200 of 237. Use Open JSON for the complete list.

References

16 links

bugzilla.redhat.com/show_bug.cgi?id=2046194X Refsource MISCExploitIssue TrackingVendor Advisory
bugzilla.redhat.com/show_bug.cgi?id=2050324X Refsource MISCREPORTIssue TrackingVendor Advisory
listman.redhat.com/archives/libguestfs/2022-February/msg00104.htmlX Refsource MISCARTICLEREPORTPatchVendor Advisory
gitlab.com/nbdkit/libnbd/-/commit/8d444b41d09a700c7ee6f9182a649f3f2d325abbX Refsource MISCPatchThird Party Advisory
access.redhat.com/security/cve/CVE-2022-0485X Refsource MISCREPORTVendor Advisory
access.redhat.com/errata/RHSA-2022:2181Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2181.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2022-0485AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2022-0485Advisory

Show all 16 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities