CVE-2022-42464

OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have a Kernel memory pool override vulnerability in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel pointer, which could be used in further attacks. The processes with system user UID run on the device would be able to mmap memory pools used by kernel and override them which could be used to gain kernel code execution on the device, gain root privileges, or cause device reboot.

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-10.md	Vendor Advisory
https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-10.md	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:openharmony:openharmony::::::::
	cpe:2.3:a:openharmony:openharmony::::::::

History

21 Nov 2024, 07:25

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~7.8~~	v2 : unknown v3 : 6.7
References	~~() https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-10.md - Vendor Advisory~~	() https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-10.md - Vendor Advisory

Information

Published : 2022-10-14 15:16

Updated : 2024-11-21 07:25

NVD link : CVE-2022-42464

Mitre link : CVE-2022-42464

CVE.ORG link : CVE-2022-42464

JSON object : View

Products Affected

openharmony

openharmony

CWE

CWE-276

Incorrect Default Permissions

{"id": "CVE-2022-42464", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "scy@openharmony.io", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-10-14T15:16:25.617", "references": [{"url": "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-10.md", "tags": ["Vendor Advisory"], "source": "scy@openharmony.io"}, {"url": "https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-10.md", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "scy@openharmony.io", "description": [{"lang": "en", "value": "CWE-276"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-276"}]}], "descriptions": [{"lang": "en", "value": "OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have a Kernel memory pool override vulnerability in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel pointer, which could be used in further attacks. The processes with system user UID run on the device would be able to mmap memory pools used by kernel and override them which could be used to gain kernel code execution on the device, gain root privileges, or cause device reboot."}, {"lang": "es", "value": "OpenHarmony versiones v3.1.2 y versiones anteriores, 3.0.6 y versiones anteriores, presentan una vulnerabilidad de anulaci\u00f3n del pool de memoria del Kernel en el controlador de dispositivo /dev/mmz_userdev. El impacto depende de los privilegios del atacante. El proceso no privilegiado que sea ejecutado en el dispositivo podr\u00eda divulgar informaci\u00f3n confidencial, incluyendo el puntero del kernel, que podr\u00eda ser usado en otros ataques. Los procesos con UID de usuario del sistema que es ejecutado en el dispositivo podr\u00edan mmap pools de memoria usados por el kernel y anularlos, lo que podr\u00eda usarse para obtener una ejecuci\u00f3n de c\u00f3digo del kernel en el dispositivo, obtener privilegios de root o causar el reinicio del dispositivo"}], "lastModified": "2024-11-21T07:25:00.910", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openharmony:openharmony:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F276BBF-B42F-41CC-8E94-158003441CCA", "versionEndIncluding": "3.0.6", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:openharmony:openharmony:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C026D184-A8AE-4DE6-A339-EA4469DDD4E7", "versionEndIncluding": "3.1.2", "versionStartIncluding": "3.1"}], "operator": "OR"}]}], "sourceIdentifier": "scy@openharmony.io"}