Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2022-20369
HistoryAug 11, 2022 - 3:15 p.m.

CVE-2022-20369

2022-08-1115:15:00
CWE-787
[email protected]
web.nvd.nist.gov
129
3
cve-2022-20369
v4l2-mem2mem.c
android kernel
local privilege escalation
out of bounds write
input validation
nvd
security vulnerability

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:M/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223375145References: Upstream kernel

Social References

More

Related

ubuntucve 1
prion 1
redhatcve 1
debiancve 1
amazon 3
nessus 34
openvas 34
ubuntu 12
osv 13
photon 1
suse 6
debian 1
ubuntucve
ubuntucve
CVE-2022-20369
2022-08-11 00:00:00
prion
prion
Input validation
2022-08-11 15:15:00
redhatcve
redhatcve
CVE-2022-20369
2022-10-25 10:20:14
debiancve
debiancve
CVE-2022-20369
2022-08-11 15:15:00
amazon
amazon
Important: kernel
2022-12-01 20:31:00
Important: kernel
2022-12-01 20:31:00
Important: kernel
2022-12-01 17:33:00
nessus
nessus
Amazon Linux 2 : kernel (ALAS-2022-1888)
2022-12-07 00:00:00
Ubuntu 18.04 LTS : Linux kernel (AWS) vulnerabilities (USN-5682-1)
2022-10-15 00:00:00
Ubuntu 18.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-5862-1)
2023-02-09 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5854-1)
2023-02-10 00:00:00
Ubuntu: Security Advisory (USN-5862-1)
2023-02-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3263-1)
2022-09-15 00:00:00
ubuntu
ubuntu
Linux kernel (Azure) vulnerabilities
2023-02-10 00:00:00
Linux kernel vulnerabilities
2022-10-10 00:00:00
Linux kernel (Azure CVM) vulnerabilities
2022-10-27 00:00:00
osv
osv
linux-azure-4.15 vulnerabilities
2023-02-10 14:08:25
linux-azure-fde vulnerabilities
2022-10-27 19:09:17
linux-snapdragon vulnerabilities
2023-02-09 23:00:01
photon
photon
Important Photon OS Security Update - PHSA-2022-3.0-0485
2022-11-10 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2022-09-14 00:00:00
Security update for the Linux Kernel (important)
2022-09-27 00:00:00
Security update for the Linux Kernel (important)
2022-09-16 00:00:00
debian
debian
[SECURITY] [DLA 3245-1] linux security update
2022-12-23 22:16:58

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:M/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON
Related for CVE-2022-20369
ubuntucve1prion1redhatcve1debiancve1amazon3nessus34openvas34ubuntu12osv13photon1suse6debian1