4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
37.7%
An information leak flaw was found in NFS over RDMA in the
net/sunrpc/xprtrdma/rpc_rdma.c in the Linux Kernel. This flaw allows an
attacker with normal user privileges to leak kernel information.
Author | Note |
---|---|
sbeattie | this is probably fixed by 912288442cb2f |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | linux | <Β 4.15.0-194.205 | UNKNOWN |
ubuntu | 20.04 | noarch | linux | <Β 5.4.0-45.49 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws | <Β 4.15.0-1142.154 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | <Β 5.4.0-1022.22 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws-5.4 | <Β 5.4.0-1022.22~18.04.1 | UNKNOWN |
ubuntu | 16.04 | noarch | linux-aws-hwe | <Β 4.15.0-1142.154~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 20.04 | noarch | linux-azure | <Β 5.4.0-1023.23 | UNKNOWN |
ubuntu | 14.04 | noarch | linux-azure | <Β 4.15.0-1153.168~14.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 16.04 | noarch | linux-azure | <Β 4.15.0-1153.168~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 18.04 | noarch | linux-azure-4.15 | <Β 4.15.0-1153.168 | UNKNOWN |
launchpad.net/bugs/cve/CVE-2022-0812
nvd.nist.gov/vuln/detail/CVE-2022-0812
security-tracker.debian.org/tracker/CVE-2022-0812
ubuntu.com/security/notices/USN-5669-1
ubuntu.com/security/notices/USN-5669-2
ubuntu.com/security/notices/USN-5678-1
ubuntu.com/security/notices/USN-5679-1
ubuntu.com/security/notices/USN-5684-1
ubuntu.com/security/notices/USN-5687-1
ubuntu.com/security/notices/USN-5695-1
www.cve.org/CVERecord?id=CVE-2022-0812
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
37.7%