Intel

CVE-2022-3545

ECS: Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2022-3545)

mediumEPSS 0.4%

Affected

  • Dell/ECS 3.8.1.0..*

Description

A vulnerability was found in area_cache_get in drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c in the Netronome Flow Processor (NFP) driver in the Linux kernel. This flaw allows a manipulation that may lead to a use-after-free issue.

Source: BSI CSAFBSI WID Portalredhat_csafcvelistv5

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

DellECS
3.8.1.0

Metrics

XIEM Effective CVSS
5.5
Source: cna-v3
EPSS percentile
35.1 %
Elevated — this CVE ranks above at least 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
medium
Priority score
39.03
Exploit maturity
no public PoC known
CVSS v3
5.5
EPSS score
0.4 %
Low — model estimates < 1% exploitation likelihood.
Published
2022-10-17 00:00 UTC
CWE
CWE-119

Weakness classes (CWE)

  • CWE-119Class

    Improper Restriction of Operations within the Bounds of a Memory Buffer

    The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

    cwe.mitre.org →

References & sources