4.9
CVE-2022-0494
- EPSS 0.42%
- Veröffentlicht 25.03.2022 19:15:10
- Zuletzt bearbeitet 21.11.2024 06:38:46
- Erkennungen
A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 5.17
Linux ≫ Linux Kernel Version 5.17 Update -
Linux ≫ Linux Kernel Version 5.17 Update rc1
Linux ≫ Linux Kernel Version 5.17 Update rc2
Linux ≫ Linux Kernel Version 5.17 Update rc3
Linux ≫ Linux Kernel Version 5.17 Update rc4
Debian ≫ Debian Linux Version 9.0
Debian ≫ Debian Linux Version 10.0
Debian ≫ Debian Linux Version 11.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.42% | 0.331 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.4 | 0.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
|
| NIST | 4.9 | 3.9 | 6.9 |
AV:L/AC:L/Au:N/C:C/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-908 Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
https://www.debian.org/security/2022/dsa-5173
https://www.debian.org/security/2022/dsa-5161
https://bugzilla.redhat.com/show_bug.cgi?id=2039448
https://lore.kernel.org/all/20220216084038.15635-1-tcs.kernel%40gmail.com/