Security Advisory

CVE-2022-21499

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-06-09 20:15:28

Last updated 2024-09-24 20:05:11

Assigner oracle

CVSS score 6.7

State PUBLISHED

Description

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

← Browse all CVEs View on cve.org ↗