CVE-2022-47022

2023-08-2219:16:30

Debian Security Bug Tracker

security-tracker.debian.org

open-mpi hwloc glibc-cpuset denial of service

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.0%

JSON

An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.

OSVersionArchitecturePackageVersionFilename
Debian12allhwloc<= 2.9.0-1hwloc_2.9.0-1_all.deb
Debian11allhwloc<= 2.4.1+dfsg-1hwloc_2.4.1+dfsg-1_all.deb
Debian999allhwloc< 2.9.3-1hwloc_2.9.3-1_all.deb
Debian13allhwloc< 2.9.3-1hwloc_2.9.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	hwloc	<= 2.9.0-1	hwloc_2.9.0-1_all.deb
Debian	11	all	hwloc	<= 2.4.1+dfsg-1	hwloc_2.4.1+dfsg-1_all.deb
Debian	999	all	hwloc	< 2.9.3-1	hwloc_2.9.3-1_all.deb
Debian	13	all	hwloc	< 2.9.3-1	hwloc_2.9.3-1_all.deb