PT-2022-2971 · Intel+1 · Intel Processors+1

Alan Miller + 4 · Published 2022-06-14 · Updated 2023-02-15 · CVE-2022-21180

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Processors (affected versions not specified)

Description The issue is related to improper clearance or release of resources in Intel processor microcode, which may allow an attacker to cause a denial of service. It involves improper input validation for some Intel processors, potentially enabling an authenticated user to cause a denial of service via local access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Resource Release

RCE

Weakness Enumeration

CWE-404

CWE-20

Related Identifiers

BDU:2022-03601

CVE-2022-21180

OPENSUSE-SU-2022:2177-1

OPENSUSE-SU-2022_2078-1

OPENSUSE-SU-2022_2079-1

OPENSUSE-SU-2022_2111-1

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2615-1

SUSE-SU-2022:2077-1

SUSE-SU-2022:2078-1

SUSE-SU-2022:2079-1

SUSE-SU-2022:2080-1

SUSE-SU-2022:2082-1

SUSE-SU-2022:2083-1

SUSE-SU-2022:2103-1

SUSE-SU-2022:2104-1

SUSE-SU-2022:2111-1

SUSE-SU-2022:2116-1

SUSE-SU-2022:2177-1

SUSE-SU-2022:2520-1

SUSE-SU-2022:2615-1

SUSE-SU-2022:2629-1

SUSE-SU-2023:0416-1

Affected Products

Intel Processors

Suse

References · 565

• https://osv.dev/vulnerability/SUSE-SU-2022:2111-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2520-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2116-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0416-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2078-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2104-1 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00645.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2022/06/16/1 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2022:2629-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:2177-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2080-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03601 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-21180 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:2615-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2177-1 · Vendor Advisory