Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2022-20421
HistoryOct 11, 2022 - 12:00 a.m.

CVE-2022-20421

2022-10-1100:00:00
ubuntu.com
ubuntu.com
8

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt
memory due to a use after free. This could lead to local escalation of
privilege with no additional execution privileges needed. User interaction
is not needed for exploitation.Product: AndroidVersions: Android
kernelAndroid ID: A-239630375References: Upstream kernel

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-201.212UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-136.153UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-57.63UNKNOWN
ubuntu22.10noarchlinux< 5.19.0-28.29UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1147.159UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1093.101UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1027.31UNKNOWN
ubuntu22.10noarchlinux-aws< 5.19.0-1016.17UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1027.31~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1093.102~18.04.2UNKNOWN
Rows per page:
1-10 of 661

Related

cve 1
osv 11
prion 1
redhatcve 1
debiancve 1
openvas 17
nessus 15
ubuntu 12
mageia 2
debian 2
photon 1
slackware 1
androidsecurity 1
ics 3
cve
cve
CVE-2022-20421
2022-10-11 20:15:00
osv
osv
[Pixploit] The binder bug
2022-10-01 00:00:00
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
2023-01-06 20:27:27
linux-bluefield vulnerabilities
2023-01-19 20:07:11
prion
prion
Memory corruption
2022-10-11 20:15:00
redhatcve
redhatcve
CVE-2022-20421
2022-11-03 04:56:04
debiancve
debiancve
CVE-2022-20421
2022-10-11 20:15:00
openvas
openvas
Ubuntu: Security Advisory (USN-5790-1)
2023-01-09 00:00:00
Ubuntu: Security Advisory (USN-5791-1)
2023-01-09 00:00:00
Ubuntu: Security Advisory (USN-5791-3)
2023-01-11 00:00:00
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5790-1)
2023-01-07 00:00:00
Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-5791-2)
2023-01-10 00:00:00
Ubuntu 20.04 LTS : Linux kernel (BlueField) vulnerabilities (USN-5815-1)
2023-01-20 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2023-01-06 00:00:00
Linux kernel vulnerabilities
2023-01-06 00:00:00
Linux kernel (BlueField) vulnerabilities
2023-01-19 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-10-23 23:35:49
Updated kernel-linus packages fix security vulnerabilities
2022-10-23 23:35:49
debian
debian
[SECURITY] [DSA 5257-1] linux security update
2022-10-18 21:06:43
[SECURITY] [DLA 3173-1] linux-5.10 security update
2022-11-01 20:57:30
photon
photon
Important Photon OS Security Update - PHSA-2022-4.0-0248
2022-09-20 00:00:00
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-11-29 21:04:28
androidsecurity
androidsecurity
Android Security Bulletin—October 2022
2022-10-03 00:00:00
ics
ics
Siemens SIMATIC S7-1500 TM MFP BIOS
2023-06-15 12:00:00
Siemens SIMATIC S7-1500 TM MFP Linux Kernel
2023-06-15 12:00:00
Siemens SIMATIC
2024-03-14 12:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON
Related for UB:CVE-2022-20421
cve1osv11prion1redhatcve1debiancve1openvas17nessus15ubuntu12mageia2debian2photon1slackware1androidsecurity1ics3