5.5

CVE-2022-21166

Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xen ≫ Xen HwPlatformx86
Fedoraproject ≫ Fedora Version35
Fedoraproject ≫ Fedora Version36
Intel ≫ Sgx Dcap SwPlatformlinux Version < 1.14.100.3
Intel ≫ Sgx Dcap SwPlatformwindows Version < 1.14.100.3
Intel ≫ Sgx Psw SwPlatformwindows Version < 2.16.100.3
Intel ≫ Sgx Psw SwPlatformlinux Version < 2.17.100.3
Intel ≫ Sgx Sdk SwPlatformwindows Version < 2.16.100.3
Intel ≫ Sgx Sdk SwPlatformlinux Version < 2.17.100.3
VMware ≫ ESXi Version7.0 Update-
VMware ≫ ESXi Version7.0 Updatebeta
VMware ≫ ESXi Version7.0 Updateupdate_1
VMware ≫ ESXi Version7.0 Updateupdate_1a
VMware ≫ ESXi Version7.0 Updateupdate_1b
VMware ≫ ESXi Version7.0 Updateupdate_1c
VMware ≫ ESXi Version7.0 Updateupdate_1d
VMware ≫ ESXi Version7.0 Updateupdate_2
VMware ≫ ESXi Version7.0 Updateupdate_2a
VMware ≫ ESXi Version7.0 Updateupdate_2c
VMware ≫ ESXi Version7.0 Updateupdate_2d
VMware ≫ ESXi Version7.0 Updateupdate_3c
VMware ≫ ESXi Version7.0 Updateupdate_3d
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
Debian ≫ Debian Linux Version11.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.416
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-459 Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

http://www.openwall.com/lists/oss-security/2022/06/16/1
Patch
Third Party Advisory
Mailing List