Files
vuln-nvd/data/2022/CVE-2022-1508.json
T

2 lines
3.0 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"product":"Kernel","vendor":"n/a","versions":[{"status":"affected","version":"Not-Known."}]}],"source":"secalert@redhat.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"037A6DFB-B41D-4CC7-86C1-A201809B79C4","versionEndExcluding":"5.15","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user triggers the io_read() function with some special parameters. This flaw allows a local user to read some memory out of bounds."},{"lang":"es","value":"Se ha encontrado un fallo de lectura fuera de límites en el módulo io_uring del kernel de Linux en la forma en que un usuario desencadena la función io_read() con algunos parámetros especiales. Este fallo permite a un usuario local leer alguna memoria fuera de límites"}],"id":"CVE-2022-1508","lastModified":"2026-06-17T04:22:34.830","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":4.2,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-08-31T16:15:09.780","references":[{"source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2022-1508"},{"source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075533"},{"source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=89c2b3b74918200e46699338d7bcc19b1ea12110"},{"source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"],"url":"https://ubuntu.com/security/CVE-2022-1508"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2022-1508"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075533"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=89c2b3b74918200e46699338d7bcc19b1ea12110"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://ubuntu.com/security/CVE-2022-1508"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"secalert@redhat.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-125"}],"source":"nvd@nist.gov","type":"Primary"}]}