Vulnerabilities > CVE-2022-40974 - Incomplete Cleanup vulnerability in Intel Integrated Performance Primitives Cryptography

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

intel

CWE-459

NVD

Published: 2023-05-10

Updated: 2023-11-07

Summary

Incomplete cleanup in the Intel(R) IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable information disclosure via local access.

Vulnerable Configurations

Part	Description	Count
Application	Intel Intel Integrated Performance Primitives Cryptography 2018_U3.1 Intel Integrated Performance Primitives Cryptography 2019 Intel Integrated Performance Primitives Cryptography 2020 Intel Integrated Performance Primitives Cryptography 2021.2 Intel Integrated Performance Primitives Cryptography 2021.3 Intel Integrated Performance Primitives Cryptography 2021.4 Intel Integrated Performance Primitives Cryptography 2021.5	11

Common Weakness Enumeration (CWE)

CWE-459 - Incomplete Cleanup

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00788.html