CVE-2022-4415

Опубликовано: 11 янв. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.

Ссылки

https://github.com/systemd/systemd/commit/b7641425659243c09473cd8fb3aef2c0d4a3eb9c
Exploit
Patch
Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/12/21/3
Mailing List
Third Party Advisory
https://github.com/systemd/systemd/commit/b7641425659243c09473cd8fb3aef2c0d4a3eb9c
Exploit
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230216-0010/
https://www.openwall.com/lists/oss-security/2022/12/21/3
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*

Версия от 246 (включая) до 253 (исключая)

EPSS

Процентиль: 4%

0.00023

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200

NVD-CWE-noinfo

Связанные уязвимости

CVE-2022-4415

CVSS3: 5.5

ubuntu

больше 2 лет назад

A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.

CVE-2022-4415

CVSS3: 5.5

redhat

больше 2 лет назад

A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.

CVE-2022-4415

CVSS3: 5.5

msrc

больше 2 лет назад

Описание отсутствует

CVE-2022-4415

CVSS3: 5.5

debian

больше 2 лет назад

A vulnerability was found in systemd. This security flaw can cause a l ...

SUSE-SU-2023:0201-1

suse-cvrf

больше 2 лет назад

Security update for systemd

EPSS

Процентиль: 4%

0.00023

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200

NVD-CWE-noinfo