PT-2022-4043 · Linux+7 · Linux Kernel+7

Roger Pau + 1 · Published 2022-07-05 · Updated 2024-09-11 · CVE-2022-33740

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xen hypervisor (affected versions not specified) Linux kernel (affected versions not specified)

Description The issue is related to information disclosure in the Xen hypervisor and Linux kernel. It may allow an attacker to gain unauthorized access to protected information or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

CWE-212

Related Identifiers

BDU:2022-04876

CVE-2022-33740

DLA-3131-1

DSA-5191-1

MGASA-2022-0263

MGASA-2022-0264

OESA-2022-1774

OPENSUSE-SU-2022_2411-1

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2615-1

OPENSUSE-SU-2022_2741-1

OPENSUSE-SU-2022_2875-1

OPENSUSE-SU-2022_3665-1

SUSE-SU-2022:2377-1

SUSE-SU-2022:2382-1

SUSE-SU-2022:2393-1

SUSE-SU-2022:2407-1

SUSE-SU-2022:2411-1

SUSE-SU-2022:2520-1

SUSE-SU-2022:2615-1

SUSE-SU-2022:2629-1

SUSE-SU-2022:2721-1

SUSE-SU-2022:2741-1

SUSE-SU-2022:2809-1

SUSE-SU-2022:2840-1

SUSE-SU-2022:2875-1

SUSE-SU-2022:2875-2

SUSE-SU-2022:2892-1

SUSE-SU-2022:2892-2

SUSE-SU-2022:3665-1

SUSE-SU-2022:3728-1

SUSE-SU-2022:3928-1

USN-5572-1

USN-5572-2

USN-5579-1

USN-5623-1

USN-5624-1

USN-5633-1

USN-5635-1

USN-5640-1

USN-5644-1

USN-5648-1

USN-5655-1

USN-5668-1

USN-5669-1

USN-5669-2

USN-5677-1

USN-5678-1

USN-5679-1

USN-5682-1

USN-5683-1

USN-5684-1

USN-5687-1

USN-5695-1

USN-5706-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

Xen

References · 660

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb · Exploit
• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/Markakd/CVE-2022-2588 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-34918-LPE-PoC · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-34918 · Exploit
• 🔥 https://github.com/theori-io/CVE-2022-32250-exploit · Exploit
• 🔥 https://github.com/0x0000000000-03/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/bb33bb/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/avboy1337/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/Ruia-ruia/CVE-2022-29582-Exploit · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-1972-infoleak-PoC · Exploit
• 🔥 https://github.com/Pwnzer0tt1/CVE-2022-36946 · Exploit
• 🔥 https://github.com/aels/CVE-2022-2586-LPE · Exploit
• 🔥 https://github.com/BassamGraini/CVE-2022-2588 · Exploit