5.5

CVE-2022-21127

Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Data is provided by the National Vulnerability Database (NVD)
Xen ≫ Xen HwPlatformx86
Intel ≫ Sgx Dcap SwPlatformlinux Version < 1.14.100.3
Intel ≫ Sgx Dcap SwPlatformwindows Version < 1.14.100.3
Intel ≫ Sgx Psw SwPlatformwindows Version < 2.16.100.3
Intel ≫ Sgx Psw SwPlatformlinux Version < 2.17.100.3
Intel ≫ Sgx Sdk SwPlatformwindows Version < 2.16.100.3
Intel ≫ Sgx Sdk SwPlatformlinux Version < 2.17.100.3
Debian ≫ Debian Linux Version10.0
Debian ≫ Debian Linux Version11.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.31% 0.535
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-459 Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

http://www.openwall.com/lists/oss-security/2022/06/16/1
Patch
Third Party Advisory
Mailing List