Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2022-21127

Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

VectorLOCAL

PublishedJun 15, 2022, 20:15

Published Bysecure@intel.com

Base Score

Score5.5

Affected Versions

No affected versions found.

References

http://www.openwall.com/lists/oss-security/2022/06/16/1
https://security.netapp.com/advisory/ntap-20220624-0008/
https://www.debian.org/security/2022/dsa-5178
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html

Weakness Type

CWE-459

CVSS Metrics

Base Score

5.5

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

LOCAL