deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-0470
Published: 2022-04-05
Description: Out of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html; https://crbug.com/1269225; https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop.html
CVE: CVE-2022-0789
Published: 2022-04-05
Description: Heap buffer overflow in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1289383; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0790
Published: 2022-04-05
Description: Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1274077; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0791
Published: 2022-04-05
Description: Use after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via user interactions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1278322; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0792
Published: 2022-04-05
Description: Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1285885; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0793
Published: 2022-04-05
Description: Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1291728; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0794
Published: 2022-04-05
Description: Use after free in WebShare in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1294097; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0795
Published: 2022-04-05
Description: Type confusion in Blink Layout in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1282782; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0796
Published: 2022-04-05
Description: Use after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1295786; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0797
Published: 2022-04-05
Description: Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1281908; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0798
Published: 2022-04-05
Description: Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1283402; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0799
Published: 2022-04-05
Description: Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-59
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1279188; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0800
Published: 2022-04-05
Description: Heap buffer overflow in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1242962; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0802
Published: 2022-04-05
Description: Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1270052; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0803
Published: 2022-04-05
Description: Inappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to tamper with the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1280233; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0804
Published: 2022-04-05
Description: Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1264561; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0805
Published: 2022-04-05
Description: Use after free in Browser Switcher in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1290700; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0806
Published: 2022-04-05
Description: Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1283434; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0807
Published: 2022-04-05
Description: Inappropriate implementation in Autofill in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1287364; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0808
Published: 2022-04-05
Description: Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in a series of user interaction to potentially exploit heap corruption via user interactions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1292271; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-0809
Published: 2022-04-05
Description: Out of bounds memory access in WebXR in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html; https://crbug.com/1293428; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-25584
Published: 2022-04-05
Description: Seyeon Tech Co., Ltd FlexWATCH FW3170-PS-E Network Video System 4.23-3000_GY allows attackers to access sensitive information.
CVSS Score: 7.5 (HIGH)
References: https://github.com/NSSCYCTFER/Flexwatch; https://github.com/NSSCYCTFER/Flexwatch
CVE: CVE-2022-26585
Published: 2022-04-05
Description: Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gitee.com/mingSoft/MCMS/issues/I4W1S9; https://gitee.com/mingSoft/MCMS/issues/I4W1S9
CVE: CVE-2022-26619
Published: 2022-04-05
Description: Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://github.com/halo-dev/halo/issues/1702; https://github.com/halo-dev/halo/issues/1702
CVE: CVE-2021-42324
Published: 2022-04-05
Description: An issue was discovered on DCN (Digital China Networks) S4600-10P-SI devices before R0241.0470. Due to improper parameter validation in the console interface, it is possible for a low-privileged authenticated attacker to escape the sandbox environment and execute system commands as root via shell metacharacters in the capture command parameters. Command output will be shown on the Serial interface of the device. Exploitation requires both credentials and physical access.
CVSS Score: 7.4 (HIGH)
CWE: CWE-78
References: https://exatel.pl/cve-2021-42324-metacharacter-injection-w-przelacznikach-dcn-s4600-10p-si/; https://www.dcneurope.eu/products/switches/s4600-10p-si; https://exatel.pl/cve-2021-42324-metacharacter-injection-w-przelacznikach-dcn-s4600-10p-si/
CVE: CVE-2021-43008
Published: 2022-04-05
Description: Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.
CVSS Score: 7.5 (HIGH)
References: https://github.com/vrana/adminer/releases/tag/v4.6.3; https://lists.debian.org/debian-lts-announce/2022/05/msg00012.html; https://podalirius.net/en/cves/2021-43008/
CVE: CVE-2021-44108
Published: 2022-04-05
Description: A null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request to amf.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/open5gs/open5gs/commit/d919b2744cd05abae043490f0a3dd1946c1ccb8c; https://github.com/open5gs/open5gs/issues/1247; https://github.com/open5gs/open5gs/commit/d919b2744cd05abae043490f0a3dd1946c1ccb8c
CVE: CVE-2021-44109
Published: 2022-04-05
Description: A buffer overflow in lib/sbi/message.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/open5gs/open5gs/commit/d919b2744cd05abae043490f0a3dd1946c1ccb8c; https://github.com/open5gs/open5gs/issues/1247; https://github.com/open5gs/open5gs/commit/d919b2744cd05abae043490f0a3dd1946c1ccb8c
CVE: CVE-2021-45891
Published: 2022-04-05
Description: An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate privileges within the application, since all permission checks are done client-side, not server-side.
CVSS Score: 8.8 (HIGH)
CWE: CWE-669
References: https://syss.de; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-063.txt; https://syss.de
CVE: CVE-2021-45892
Published: 2022-04-05
Description: An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is storage of Passwords in a Recoverable Format.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-522
References: https://syss.de; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-064.txt; https://syss.de
CVE: CVE-2021-45893
Published: 2022-04-05
Description: An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes password guessing easier.
CVSS Score: 7.5 (HIGH)
CWE: CWE-178
References: https://syss.de; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-065.txt; https://syss.de
CVE: CVE-2022-24231
Published: 2022-04-05
Description: Simple Student Information System v1.0 was discovered to contain a SQL injection vulnerability via add/Student.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nsparker1337/OpenSource/blob/main/Blind_XSS; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Simple-Student-Information; https://github.com/nsparker1337/OpenSource/blob/main/Blind_XSS
CVE: CVE-2022-25356
Published: 2022-04-05
Description: Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-91, CWE-91
References: https://www.altn.com/Products/SecurityGateway-Email-Firewall/; https://www.swascan.com/security-advisory-alt-n-security-gateway/; https://www.swascan.com/security-blog/
CVE: CVE-2022-26281
Published: 2022-04-05
Description: BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311, CWE-732
References: http://bigant.com; https://github.com/bzyo/cve-pocs/tree/master/CVE-2022-26281; https://www.bigantsoft.com/
CVE: CVE-2022-26615
Published: 2022-04-05
Description: A cross-site scripting (XSS) vulnerability in College Website Content Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User Profile Name text fields.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/nsparker1337/OpenSource/blob/main/exploit_xss_cwms; https://github.com/nsparker1337/OpenSource/blob/main/exploit_xss_cwms
CVE: CVE-2021-33207
Published: 2022-04-05
Description: The HTTP client in MashZone NextGen through 10.7 GA deserializes untrusted data when it gets an HTTP response with a 570 status code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33207; https://www.softwareag.com/corporate/products/az/mashzone_nextgen/default; https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33207
CVE: CVE-2021-39114
Published: 2022-04-05
Description: Affected versions of Atlassian Confluence Server and Data Center allow users with a valid account on a Confluence Data Center instance to execute arbitrary Java code or run arbitrary system commands by injecting an OGNL payload. The affected versions are before version 6.13.23, from version 6.14.0 before 7.4.11, from version 7.5.0 before 7.11.6, and from version 7.12.0 before 7.12.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://jira.atlassian.com/browse/CONFSERVER-68844; https://jira.atlassian.com/browse/CONFSERVER-68844
CVE: CVE-2022-1212
Published: 2022-04-05
Description: Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/mruby/mruby/commit/3cf291f[PII_REDACTED]2beaf8553e42ba8891ab3c6; https://huntr.dev/bounties/9fcc06d0-08e4-49c8-afda-2cae40946abe; https://github.com/mruby/mruby/commit/3cf291f[PII_REDACTED]2beaf8553e42ba8891ab3c6
CVE: CVE-2022-1213
Published: 2022-04-05
Description: SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191
CVSS Score: 8.1 (HIGH)
CWE: CWE-918
References: https://github.com/livehelperchat/livehelperchat/commit/abc9599ee7aded466ca216741dcaea533c908111; https://huntr.dev/bounties/084387f6-5b9c-4017-baa2-5fcf65b051e1; https://github.com/livehelperchat/livehelperchat/commit/abc9599ee7aded466ca216741dcaea533c908111
CVE: CVE-2022-23909
Published: 2022-04-05
Description: There is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: http://packetstormsecurity.com/files/166574/Sherpa-Connector-Service-2020.2.20328.2050-Unquoted-Service-Path.html; https://github.com/netsectuna/CVE-2022-23909; http://packetstormsecurity.com/files/166574/Sherpa-Connector-Service-2020.2.20328.2050-Unquoted-Service-Path.html
CVE: CVE-2022-25154
Published: 2022-04-05
Description: A DLL hijacking vulnerability in Samsung portable SSD T5 PC software before 1.6.9 could allow a local attacker to escalate privileges. (An attacker must already have user privileges on Windows 7, 10, or 11 to exploit this vulnerability.)
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2022-1235
Published: 2022-04-05
Description: Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96.
CVSS Score: 8.2 (HIGH)
CWE: CWE-916
References: https://github.com/livehelperchat/livehelperchat/commit/6538d6df3d8a60fee254170b08dd76a161f7bfdc; https://huntr.dev/bounties/92f7b2d4-fa88-4c62-a2ee-721eebe01705; https://github.com/livehelperchat/livehelperchat/commit/6538d6df3d8a60fee254170b08dd76a161f7bfdc
CVE: CVE-2022-1236
Published: 2022-04-05
Description: Weak Password Requirements in GitHub repository weseek/growi prior to v5.0.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-521
References: https://github.com/weseek/growi/commit/b584e2a47ee3c8ce1d8ef[PII_REDACTED]5c015327e; https://huntr.dev/bounties/c7df088f-e355-45e6-9267-e41030dc6a32; https://github.com/weseek/growi/commit/b584e2a47ee3c8ce1d8ef[PII_REDACTED]5c015327e
CVE: CVE-2021-38834
Published: 2022-04-05
Description: easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code.
CVSS Score: 8.8 (HIGH)
References: https://www.exploit-db.com/exploits/50194; https://www.exploit-db.com/exploits/50194
CVE: CVE-2022-26356
Published: 2022-04-05
Description: Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_DMOP_track_dirty_vram (was named HVMOP_track_dirty_vram before Xen 4.9) is racy with ongoing log dirty hypercalls. A suitably timed call to XEN_DMOP_track_dirty_vram can enable log dirty while another CPU is still in the process of tearing down the structures related to a previously enabled log dirty mode (XEN_DOMCTL_SHADOW_OP_OFF). This is due to lack of mutually exclusive locking between both operations and can lead to entries being added in already freed slots, resulting in a memory leak.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-667
References: http://www.openwall.com/lists/oss-security/2022/04/05/1; http://xenbits.xen.org/xsa/advisory-397.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/
CVE: CVE-2022-26357
Published: 2022-04-05
Description: race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.openwall.com/lists/oss-security/2022/04/05/2; http://xenbits.xen.org/xsa/advisory-399.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/
CVE: CVE-2022-26358
Published: 2022-04-05
Description: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for AMD-Vi. These are typically used for platform tasks such as legacy USB emulation. Since the precise purpose of these regions is unknown, once a device associated with such a region is active, the mappings of these regions need to remain continuouly accessible by the device. This requirement has been violated. Subsequent DMA or interrupts from the device may have unpredictable behaviour, ranging from IOMMU faults to memory corruption.
CVSS Score: 7.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2022/04/05/3; http://xenbits.xen.org/xsa/advisory-400.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/
CVE: CVE-2022-26359
Published: 2022-04-05
Description: IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for AMD-Vi. These are typically used for platform tasks such as legacy USB emulation. Since the precise purpose of these regions is unknown, once a device associated with such a region is active, the mappings of these regions need to remain continuouly accessible by the device. This requirement has been violated. Subsequent DMA or interrupts from the device may have unpredictable behaviour, ranging from IOMMU faults to memory corruption.
CVSS Score: 7.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2022/04/05/3; http://xenbits.xen.org/xsa/advisory-400.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/