VDB

CVE-2022-0882

CVE-2022-0882 PUBLISHED CVSS 5.300000190734863 MEDIUM

A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX_RSRC_KIND_ROOT. It is recommended to upgrade the Fuchsia kernel to 4.1.1 or greater.

EPSS 0.12% · 1.8th percentile

Risk Scores

CVSS 3.1
5.300000190734863
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N
EPSS Score
0.12%
1.8th percentile

Affected Products

VendorProductVersions
googlefuchsia0
Google LLCFuchsia Kernel*

Timeline

  • May 3, 2022 CVE Published
  • May 4, 2022 EPSS Score
  • Jun 23, 2022 EPSS Score
  • Aug 12, 2022 EPSS Score
  • Oct 1, 2022 EPSS Score
  • Nov 19, 2022 EPSS Score
  • Jan 8, 2023 EPSS Score
  • Feb 26, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 17, 2023 EPSS Score
  • Jun 5, 2023 EPSS Score
  • Jul 25, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›