CVE-2022-42327

Katalog CVE

CVSS 7.1 · High EPSS 0,24%

Kerentanan Improper Access Control pada xen, fedoraproject fedora. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode. Access to this shared page bypasses the expected isolation that should exist between two guests.

Rincian

Terbit di NVD

1 November 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 13,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://xenbits.xen.org/xsa/advisory-412.html patch · advisory vendor
• https://xenbits.xenproject.org/xsa/advisory-412.txt advisory vendor
• http://www.openwall.com/lists/oss-security/2022/11/01/3 mailing list · patch · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MS...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJ...
• https://security.gentoo.org/glsa/202402-07