Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-36402

Опубликовано: 16 сент. 2022
Источник: debian
EPSS Низкий

Описание

An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

Пакеты

ПакетСтатусВерсия исправленияРелизТип
linuxfixed6.4.13-1package
linuxfixed6.1.52-1bookwormpackage
linuxfixed5.10.197-1bullseyepackage

Примечания

  • https://git.kernel.org/linus/14abdfae508228a7307f7491b5c4215ae70c6542 (6.5)

  • https://bugzilla.openanolis.cn/show_bug.cgi?id=2072

EPSS

Процентиль: 2%
0.00017
Низкий

Связанные уязвимости

CVSS3: 6.3
ubuntu
почти 3 года назад

An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

CVSS3: 5.5
redhat
почти 3 года назад

An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

CVSS3: 6.3
nvd
почти 3 года назад

An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

CVSS3: 5.5
github
почти 3 года назад

An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).

CVSS3: 5.5
fstec
почти 3 года назад

Уязвимость драйвера vmwgfx (drivers/gpu/vmxgfx/vmxgfx_execbuf.c) компонента GPU ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 2%
0.00017
Низкий