PatchaPalooza

CVE-2022-45869:

CVE-2022-45869 is a vulnerability, with a CVSS 3.1 base score of 5.5 (Medium). An attacker can exploit it by an attacker with local access, with low privileges and without user interaction. Microsoft has not reported exploitation in the wild. The EPSS model estimates a 0.25% probability of exploitation activity in the next 30 days, higher than 17% of all scored vulnerabilities. Microsoft released the fix on 2 December 2022 in the December 2022 Patch Tuesday. It affects 4 products in 1 product family (Mariner).

Key facts

CVE ID
CVE-2022-45869
Severity
Medium CVSS 5.5
Exploited in the wild
No
Publicly disclosed
No
Weakness
CWE-362
EPSS
0.25% (percentile 17%)
CISA KEV
Not listed
Released
Last updated
Patch Tuesday
December 2022 Patch Tuesday
Product families
Mariner

CVSS score and vector

Microsoft scores CVE-2022-45869 at 5.5 (temporal 5.5) using CVSS 3.1. Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

MetricValue
Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
ScopeUnchanged
Confidentiality impactNone
Integrity impactNone
Availability impactHigh

Affected products (4)

Mariner

ProductSecurity updateTypeFixed buildRestart
CBL Mariner 1.0 x64kernelCBL-Mariner5.10.158.1-1
CBL Mariner 1.0 ARMkernelCBL-Mariner5.10.158.1-1
CBL Mariner 2.0 x64kernelCBL-Mariner5.15.82.1-1
CBL Mariner 2.0 ARMkernelCBL-Mariner5.15.82.1-1

NIST NVD data

NVD status
Modified
NVD CVSS
5.5 (MEDIUM)
NVD weakness
CWE-362
Published to NVD
NVD last modified

Affected configurations (CPE)

ProductVulnerable versions
linux kernelbefore 6.1
linux kernel 6.1all listed versions
linux kernel 6.1all listed versions
linux kernel 6.1all listed versions
linux kernel 6.1all listed versions
linux kernel 6.1all listed versions
linux kernel 6.1all listed versions

References

Revision history

VersionDateDescription
1.0Information published.

Sources