CVE-2022-27674 - OpenCVE

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Amd	Amd Uprof
Freebsd	Freebsd
Linux	Linux Kernel
Microsoft	Windows

Configuration 1 [-]

AND

cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*

cpe:2.3:a:amd:amd_uprof:*:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

cpe:2.3:a:amd:amd_uprof:*:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

cpe:2.3:a:amd:amd_uprof:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1046

History

No history.

MITRE

Status: PUBLISHED

Assigner: AMD

Published: 2022-11-09T20:45:35.675788Z

Updated: 2024-09-17T02:21:30.848Z

Reserved: 2022-03-23T00:00:00

Link: CVE-2022-27674

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-11-09T21:15:14.270

Modified: 2023-11-07T03:45:23.060

Link: CVE-2022-27674

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:amd:amd_uprof:*:*:*:*:*:*:*:*", "matchCriteriaId": "F198CD40-B926-49C8-9FDA-D5853A7FF4EA", "versionEndExcluding": "3.6.549", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:amd:amd_uprof:*:*:*:*:*:*:*:*", "matchCriteriaId": "EAC6A7D5-0F04-4473-9480-EBC7A8860ABE", "versionEndExcluding": "3.6.839", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:amd:amd_uprof:*:*:*:*:*:*:*:*", "matchCriteriaId": "738F3D59-9A14-4DCD-B1EE-30E07EC362D3", "versionEndExcluding": "3.6.449", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Insufficient validation in the IOCTL input/output buffer in AMD \u03bcProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service."}, {"lang": "es", "value": "Una validaci\u00f3n insuficiente en el b\u00fafer de entrada/salida IOCTL en AMD ?Prof puede permitir a un atacante eludir las comprobaciones de l\u00edmites, lo que podr\u00eda provocar un fallo del kernel de Windows que provoque una denegaci\u00f3n de servicio."}], "id": "CVE-2022-27674", "lastModified": "2023-11-07T03:45:23.060", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-11-09T21:15:14.270", "references": [{"source": "psirt@amd.com", "tags": ["Vendor Advisory"], "url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1046"}], "sourceIdentifier": "psirt@amd.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}