Lucene search

GoogleCVE-2022-0247

HistoryFeb 25, 2022 - 11:15 a.m.

CVE-2022-0247

2022-02-2511:15:07

CWE-732

Google

web.nvd.nist.gov

fuchsia

vmo

access control

security vulnerability

copy-on-write

nvd

cve-2022-0247

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

AI Score

5.3

Confidence

High

EPSS

Percentile

5.1%

JSON

An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that they do not have permission to. We recommend upgrading past commit d97c05d2301799ed585620a9c5c739d36e7b5d3d or any of the listed versions.

Affected configurations

Nvd

Vulners

Node

googlefuchsiaRange<2022-01-03

VendorProductVersionCPE
googlefuchsia*cpe:2.3:o:google:fuchsia:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	fuchsia	*	cpe:2.3:o:google:fuchsia::::::::

CNA Affected

[
  {
    "product": "Fuchsia",
    "vendor": "Google LLC",
    "versions": [
      {
        "lessThan": "4.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

fuchsia.googlesource.com/fuchsia/+/d97c05d2301799ed585620a9c5c739d36e7b5d3d

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

AI Score

5.3

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-0247