Lucene search

K
nvd[email protected]NVD:CVE-2022-3202
HistorySep 14, 2022 - 3:15 p.m.

CVE-2022-3202

2022-09-1415:15:11
CWE-476
web.nvd.nist.gov
4
null pointer
jfs
file system
crash
kernel info

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS

0

Percentile

5.1%

A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the system or leak kernel internal information.

Affected configurations

Nvd
Node
linuxlinux_kernelRange<4.9.311
OR
linuxlinux_kernelRange4.104.14.276
OR
linuxlinux_kernelRange4.154.19.238
OR
linuxlinux_kernelRange4.205.4.189
OR
linuxlinux_kernelRange5.5.05.10.111
OR
linuxlinux_kernelRange5.115.15.34
OR
linuxlinux_kernelRange5.165.16.20
OR
linuxlinux_kernelRange5.175.17.3
Node
netapph410c_firmwareMatch-
AND
netapph410cMatch-
Node
netapph300s_firmwareMatch-
AND
netapph300sMatch-
Node
netapph500s_firmwareMatch-
AND
netapph500sMatch-
Node
netapph700s_firmwareMatch-
AND
netapph700sMatch-
Node
netapph410s_firmwareMatch-
AND
netapph410sMatch-

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS

0

Percentile

5.1%