CVE-2022-0882CWE-200

Illegal access to Kernel log in Fuchsia

Medium · published May 3, 2022

CVSS v3.1
5.3
EPSS
0%
Percentile
1.6
In the wild
Unconfirmed
What it is

A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX_RSRC_KIND_ROOT. It is recommended to upgrade the Fuchsia kernel to 4.1.1 or greater.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00117 · 1.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-05-03T15:50Z
EPSS history
Timeline
  • 03 MAY 15:50Z
    Illegal access to Kernel log in Fuchsia
    cvelistv5