Vulnerability Description
Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access.
CVSS Score
5.5
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Xeon E3-1585 V5 Firmware | - |
| Intel | Xeon E3-1585 V5 | - |
| Intel | Xeon E3-1585L V5 Firmware | - |
| Intel | Xeon E3-1585L V5 | - |
| Intel | Xeon E3-1578L V5 Firmware | - |
| Intel | Xeon E3-1578L V5 | - |
| Intel | Xeon E3-1575M V5 Firmware | - |
| Intel | Xeon E3-1575M V5 | - |
| Intel | Xeon E3-1565L V5 Firmware | - |
| Intel | Xeon E3-1565L V5 | - |
| Intel | Xeon E3-1558L V5 Firmware | - |
| Intel | Xeon E3-1558L V5 | - |
| Intel | Xeon E3-1545M V5 Firmware | - |
| Intel | Xeon E3-1545M V5 | - |
| Intel | Xeon E3-1535M V5 Firmware | - |
| Intel | Xeon E3-1535M V5 | - |
| Intel | Xeon E3-1515M V5 Firmware | - |
| Intel | Xeon E3-1515M V5 | - |
| Intel | Xeon E3-1505M V5 Firmware | - |
| Intel | Xeon E3-1505M V5 | - |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2022/06/16/1Mailing ListPatchThird Party Advisory
- https://security.netapp.com/advisory/ntap-20220624-0006/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00645.Vendor Advisory
- http://www.openwall.com/lists/oss-security/2022/06/16/1Mailing ListPatchThird Party Advisory
- https://security.netapp.com/advisory/ntap-20220624-0006/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00645.Vendor Advisory
FAQ
What is CVE-2022-21180?
CVE-2022-21180 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access.
How severe is CVE-2022-21180?
CVE-2022-21180 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-21180?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Xeon E3-1585 V5 Firmware, Intel Xeon E3-1585 V5, Intel Xeon E3-1585L V5 Firmware, Intel Xeon E3-1585L V5, Intel Xeon E3-1578L V5 Firmware.