← Back

CVE-2022-21123

nvd nist
Published: Jun 15, 2022Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Affected (25)

Products: Xen: Xen · Fedoraproject: Fedora · Intel: Sgx Dcap, Sgx Psw, Sgx Sdk · +2 more
Show all products
Xen: Xen · Fedoraproject: Fedora · Intel: Sgx Dcap, Sgx Psw, Sgx Sdk · Vmware: Esxi · Debian: Debian Linux
Xen
1 product
Xen
Fedoraproject
1 product
Fedora
Intel
3 products
Sgx Dcap
Sgx Psw
Sgx Sdk
Vmware
1 product
Esxi
Debian
1 product
Debian Linux
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Xen
All versions
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 35
Fedora
Version 36
Configuration C
6 vulnerable
Vulnerable SoftwareAffected Versions
Intel
Sgx Dcap
Before 1.14.100.3
Sgx Dcap
Before 1.14.100.3
Intel
Sgx Psw
Before 2.17.100.3
Sgx Psw
Before 2.16.100.3
Intel
Sgx Sdk
Before 2.17.100.3
Sgx Sdk
Before 2.16.100.3
Configuration D
13 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Esxi
Version 7.0
Esxi
Version 7.0 beta
Esxi
Version 7.0 update_1
Esxi
Version 7.0 update_1a
Esxi
Version 7.0 update_1b
Esxi
Version 7.0 update_1c
Esxi
Version 7.0 update_1d
Esxi
Version 7.0 update_2
Esxi
Version 7.0 update_2a
Esxi
Version 7.0 update_2c
Esxi
Version 7.0 update_2d
Esxi
Version 7.0 update_3c
Esxi
Version 7.0 update_3d
Configuration E
3 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 10.0
Debian Linux
Version 11.0
Debian Linux
Version 9.0

Related CWEs

CWE-459
Incomplete Cleanup
The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

References (24)

Source: secure@intel.com
Mailing ListPatchThird Party Advisory
Source: secure@intel.com
Mailing ListThird Party Advisory
Source: secure@intel.com
Source: secure@intel.com
Source: secure@intel.com
Source: secure@intel.com
Source: secure@intel.com
Third Party Advisory
Source: secure@intel.com
Third Party Advisory
Source: secure@intel.com
Third Party Advisory
Source: secure@intel.com
Third Party Advisory
Source: secure@intel.com
Third Party Advisory
Source: secure@intel.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.