Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9w4x-cwgm-cchf

Опубликовано: 23 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6

Описание

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer as the location to copy data to an attacker-specified buffer, leading to information disclosure.

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer as the location to copy data to an attacker-specified buffer, leading to information disclosure.

EPSS

Процентиль: 18%
0.00058
Низкий

6 Medium

CVSS3

Дефекты

CWE-401

Связанные уязвимости

CVSS3: 6
nvd
больше 3 лет назад

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer as the location to copy data to an attacker-specified buffer, leading to information disclosure.

EPSS

Процентиль: 18%
0.00058
Низкий

6 Medium

CVSS3

Дефекты

CWE-401