CVE-2022-41568 - Vulnerability Details - OpenCVE

LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Linecorp	Line

Configuration 1 [-]

cpe:2.3:a:linecorp:line:*:*:*:*:*:iphone_os:*:*

No data.

References

Link	Providers
https://hackerone.com/reports/1701642

History

Fri, 25 Apr 2025 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: LINE

Published: 2022-11-29T00:00:00.000Z

Updated: 2025-04-25T17:21:40.862Z

Reserved: 2022-09-26T00:00:00.000Z

Link: CVE-2022-41568

Vulnrichment

Updated: 2024-08-03T12:49:41.912Z

NVD

Status : Modified

Published: 2022-11-29T05:15:11.427

Modified: 2025-04-25T18:15:24.833

Link: CVE-2022-41568

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:linecorp:line:*:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "0272EAC8-8E13-41D8-A05A-5FC31BA164DA", "versionEndExcluding": "12.17.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat."}, {"lang": "es", "value": "El cliente LINE para iOS anterior a 12.17.0 podr\u00eda fallar al compartir una clave compartida no v\u00e1lida de e2ee en el chat grupal."}], "id": "CVE-2022-41568", "lastModified": "2025-04-25T18:15:24.833", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2022-11-29T05:15:11.427", "references": [{"source": "dl_cve@linecorp.com", "tags": ["Permissions Required", "Third Party Advisory"], "url": "https://hackerone.com/reports/1701642"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required", "Third Party Advisory"], "url": "https://hackerone.com/reports/1701642"}], "sourceIdentifier": "dl_cve@linecorp.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-400"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}