Uninitialized Pointer Access Vulnerability in Intel Trace Analyzer and Collector
CVE-2022-21156

5.5MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Trace Analyzer And Collector
Vendor
CVE Published:
9 February 2022

What is CVE-2022-21156?

The Intel Trace Analyzer and Collector is susceptible to a vulnerability that involves the access of an uninitialized pointer. This issue, present in versions prior to 2021.5, may allow an authenticated user to cause a denial of service through local access. Users are advised to upgrade to the latest version to mitigate potential risks. For more detailed information, refer to the advisory provided by Intel.

Affected Version(s)

Intel(R) Trace Analyzer and Collector before version 2021.5

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.