Lucene search
HistoryNov 09, 2022 - 9:15 p.m.
CVE-2022-23831
amd
windows kernel
validation
μprof
denial of service
cve-2022-23831
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
38.6%
Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service.
Affected configurations
Node
amdamd_uprofRange<3.6.549
freebsdfreebsdMatch-
Node
amdamd_uprofRange<3.6.839
microsoftwindowsMatch-
Node
amdamd_uprofRange<3.6.449
linuxlinux_kernelMatch-
Related
prion
prion
Input validation
2022-11-09 21:15:00
cve
cve
CVE-2022-23831
2022-11-09 21:15:13
cvelist
cvelist
CVE-2022-23831
2022-11-08 00:00:00
amd
amd
AMD μProf Security Bulletin
2022-11-08 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
38.6%
Related for NVD:CVE-2022-23831