CVE-2022-21166CWE-459

CVE-2022-21166

Medium · published June 16, 2022

CVSS v3.1
5.5
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.06451 · 93.7th percentile
Weakness
CWE-459 · Incomplete Cleanup
Published
2022-06-16T01:15Z
Affected products (25)
ProductVersionsFixed in
xen/xenall versions—
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
intel/sgx_dcap< 1.14.100.31.14.100.3
intel/sgx_dcap< 1.14.100.31.14.100.3
intel/sgx_psw< 2.16.100.32.16.100.3
intel/sgx_psw< 2.17.100.32.17.100.3
intel/sgx_sdk< 2.16.100.32.16.100.3
intel/sgx_sdk< 2.17.100.32.17.100.3
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
vmware/esxiall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
debian/debian_linuxall versions—
References (25)
http://www.openwall.com/lists/oss-security/2022/06/16/1 · [email protected]https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/ · [email protected]https://security.gentoo.org/glsa/202208-23 · [email protected]https://security.netapp.com/advisory/ntap-20220624-0008/ · [email protected]https://www.debian.org/security/2022/dsa-5173 · [email protected]https://www.debian.org/security/2022/dsa-5178 · [email protected]https://www.debian.org/security/2022/dsa-5184 · [email protected]https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html · [email protected]http://www.openwall.com/lists/oss-security/2022/06/16/1 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/ · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/202208-23 · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20220624-0008/ · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2022/dsa-5173 · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2022/dsa-5178 · af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2022/dsa-5184 · af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 15 JUN 20:03Z
    Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information…
    cvelistv5