Null Pointer Dereference in Intel Trace Analyzer and Collector Software
CVE-2022-42878

2.8LOW

Key Information:

Vendor

Intel
Status
Intel(r) Trace Analyzer And Collector Software
Vendor
CVE Published:
10 May 2023

What is CVE-2022-42878?

A null pointer dereference vulnerability exists in Intel Trace Analyzer and Collector software prior to version 2021.8.0. This flaw may allow an authenticated user to potentially trigger a situation that leads to information disclosure through local access. Users of affected versions are advised to upgrade to the latest version to mitigate this risk.

Affected Version(s)

Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
2.8
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.