Lucene search

ROSA LABROSA-SA-2024-2415

HistoryMay 07, 2024 - 7:41 a.m.

Advisory ROSA-SA-2024-2415

2024-05-0707:41:19

ROSA LAB

abf.rosalinux.ru

advisory

rosa-sa-2024-2415

hwloc 2.7.1

rosa-chrome

cve-2022-47022

glibc-cpuset

denial of service

topology-linux.c

fixed

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

software: hwloc 2.7.1
OS: ROSA-CHROME

package_evr_string: hwloc-2.7.1-2

CVE-ID: CVE-2022-47022
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: A problem discovered in open-mpi hwloc allows attackers to cause denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update hwloc

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchhwloc< 2.7.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ROSA	any	noarch	hwloc	< 2.7.1	UNKNOWN

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Related for ROSA-SA-2024-2415