Lucene search

RedhatCVE-2022-3103

HistorySep 26, 2022 - 3:15 p.m.

CVE-2022-3103

2022-09-2615:15:26

CWE-193

redhat

web.nvd.nist.gov

cve-2022-3103

off-by-one

io_uring module

nvd

security

vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

12.6%

JSON

off-by-one in io_uring module.

Affected configurations

Nvd

Vulners

Node

linuxlinux_kernelMatch6.0rc3

VendorProductVersionCPE
linuxlinux_kernel6.0cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	6.0	cpe:2.3:o:linux:linux_kernel:6.0:rc3::::::

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.0-rc3"
      }
    ]
  }
]

References

github.com/torvalds/linux/releases/tag/v6.0-rc3

Social References

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2022-3103