Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-30773

Опубликовано: 14 нояб. 2022
Источник: nvd
CVSS3: 6.4
EPSS Низкий

Описание

DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack). DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack). This issue was discovered by Insyde engineering. This issue is fixed in Kernel 5.4: 05.44.23 and Kernel 5.5: 05.52.23. CWE-367

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:insyde:kernel:*:*:*:*:*:*:*:*
Версия от 5.4 (включая) до 5.4.05.44.23 (исключая)
cpe:2.3:a:insyde:kernel:*:*:*:*:*:*:*:*
Версия от 5.5 (включая) до 5.5.05.52.23 (исключая)

EPSS

Процентиль: 26%
0.00093
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-367
CWE-367

Связанные уязвимости

CVSS3: 6.4
github
около 3 лет назад

DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack). DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack). This issue was discovered by Insyde engineering. This issue is fixed in Kernel 5.4: 05.44.23 and Kernel 5.5: 05.52.23. CWE-367

EPSS

Процентиль: 26%
0.00093
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-367
CWE-367