5.5

CVE-2022-21123

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xen ≫ Xen HwPlatformx86
Fedoraproject ≫ Fedora Version35
Fedoraproject ≫ Fedora Version36
Intel ≫ Sgx Dcap SwPlatformlinux Version < 1.14.100.3
Intel ≫ Sgx Dcap SwPlatformwindows Version < 1.14.100.3
Intel ≫ Sgx Psw SwPlatformwindows Version < 2.16.100.3
Intel ≫ Sgx Psw SwPlatformlinux Version < 2.17.100.3
Intel ≫ Sgx Sdk SwPlatformwindows Version < 2.16.100.3
Intel ≫ Sgx Sdk SwPlatformlinux Version < 2.17.100.3
VMware ≫ ESXi Version7.0 Update-
VMware ≫ ESXi Version7.0 Updatebeta
VMware ≫ ESXi Version7.0 Updateupdate_1
VMware ≫ ESXi Version7.0 Updateupdate_1a
VMware ≫ ESXi Version7.0 Updateupdate_1b
VMware ≫ ESXi Version7.0 Updateupdate_1c
VMware ≫ ESXi Version7.0 Updateupdate_1d
VMware ≫ ESXi Version7.0 Updateupdate_2
VMware ≫ ESXi Version7.0 Updateupdate_2a
VMware ≫ ESXi Version7.0 Updateupdate_2c
VMware ≫ ESXi Version7.0 Updateupdate_2d
VMware ≫ ESXi Version7.0 Updateupdate_3c
VMware ≫ ESXi Version7.0 Updateupdate_3d
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
Debian ≫ Debian Linux Version11.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.28% 0.927
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-459 Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
Third Party Advisory
Mailing List
https://security.gentoo.org/glsa/202208-23
Third Party Advisory
https://www.debian.org/security/2022/dsa-5173
Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/06/16/1
Patch
Third Party Advisory
Mailing List
https://www.debian.org/security/2022/dsa-5178
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/
https://www.debian.org/security/2022/dsa-5184
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/
https://security.netapp.com/advisory/ntap-20220624-0008/
Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html
Patch
Vendor Advisory