fkie_cve-2022-31222
Vulnerability from fkie_nvd
Published
2022-09-12 19:15
Modified
2024-11-21 07:04
Summary
Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by consuming excess memory in order to cause the application to crash.



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:chengming_3900_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4ABA1EB9-E120-4022-859D-BEA3D8D3C322",
              "versionEndExcluding": "1.1.66",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:chengming_3900:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "15E2ECE6-1E6F-4E84-B3CB-067B4E065268",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:inspiron_14_plus_7420_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "111298D7-EE80-48B4-9C27-1C24483A98E2",
              "versionEndExcluding": "1.2.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:inspiron_14_plus_7420:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE239B9D-0D57-4DF7-B63D-7B6D60038609",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:inspiron_16_plus_7620_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6F88F1A-AC8F-4178-B00E-29934DC31315",
              "versionEndExcluding": "1.2.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:inspiron_16_plus_7620:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7830B4B7-1153-4DFB-935E-DF4B5A562E74",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:inspiron_3910_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B87F4A3-C187-4840-86AD-6B7C9CD8C61E",
              "versionEndExcluding": "1.1.66",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:inspiron_3910:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A45EDB0-1897-4C15-807F-CE9AE0B0ACD0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:inspiron_5320_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D9520A2-CF13-4FB9-B971-ACD9CADF644E",
              "versionEndExcluding": "1.1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:inspiron_5320:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9D1E517-D85A-42BA-A224-DE5E0C7B2912",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:inspiron_5420_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FD4FF789-86F1-46DC-A1AC-87053BDBD7E5",
              "versionEndExcluding": "1.4.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:inspiron_5420:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C769A612-8800-4A42-B28F-21C9C47041B0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:inspiron_5620_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C672F4A8-2ABF-4092-9773-3BDC402BE23F",
              "versionEndExcluding": "1.4.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:inspiron_5620:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5273F5B-9A70-4E33-A7E1-94F89BC65531",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:inspiron_7420_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B6DA5C9-AFC7-48F3-A9FE-6333CBCC5A4A",
              "versionEndExcluding": "1.3.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:inspiron_7420:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C1ACD6F-C805-4FF7-9766-0319C273455F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:inspiron_7620_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "42665B76-BAE3-40C5-B4E3-879CCC1D246D",
              "versionEndExcluding": "1.3.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:inspiron_7620:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0452378A-736C-4BD0-A581-88FC5E1EF08F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:optiplex_3000_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8C073B6-CB0D-4C55-8663-FFF9B651E463",
              "versionEndExcluding": "1.1.66",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:optiplex_3000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF4DFD8E-6091-46BE-AFB1-3AAADC4480CF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:optiplex_3000_thin_client_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB0FD980-4776-4475-9394-F68FE61723AF",
              "versionEndExcluding": "1.0.7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:optiplex_3000_thin_client:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C4B0B6B-7740-46D0-9FE0-3AFF8D9B4DDA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:optiplex_5000_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C030747-BAC5-4E6B-B44C-A2A2F71805FC",
              "versionEndExcluding": "1.3.62",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:optiplex_5000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "77A30EA6-C9E4-40AD-AE92-0AB3891BC001",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:optiplex_5400_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "86ED87FB-3696-4185-AAE8-759549C2793D",
              "versionEndExcluding": "1.0.13",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:optiplex_5400:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F53D91BF-DA1C-4BFB-9E17-AB5266DB255F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:optiplex_7000_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9E2C7116-C25E-4D1D-B1FC-798A46014438",
              "versionEndExcluding": "1.3.62",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:optiplex_7000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3B517F7-D2D1-44DD-B917-1CE71F30C13B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:optiplex_7000_oem_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A649171-2633-4FF4-8C6D-B19CBD6779AC",
              "versionEndExcluding": "1.3.62",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:optiplex_7000_oem:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B33F8E75-DAB2-4303-8A0B-305077B492F2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:optiplex_7400_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "17EBD3A6-3C58-43EA-90C6-0CA249C25D49",
              "versionEndExcluding": "1.0.13",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:optiplex_7400:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "96921992-08BC-4D00-A248-191FC7CD09DD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:precision_3460_small_form_factor_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2256294-49CD-42ED-A877-DFA5C16390A7",
              "versionEndExcluding": "1.3.62",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:precision_3460_small_form_factor:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BF5222C-6E3A-40FA-9DA7-7415AEC46930",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:precision_3660_tower_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F680F8A-D48C-4B2F-AB77-808A95AB9721",
              "versionEndExcluding": "1.3.71",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:precision_3660_tower:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "478B6D3B-CBB5-4CAD-971E-D613375E928D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:precision_5770_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C740009F-BE38-4BEC-9EC3-169CB724914F",
              "versionEndExcluding": "1.6.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6FB330E8-BD8A-49B7-80DB-69C0FF8B0FEF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:vostro_3710_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "53D9EF5C-5EDD-4239-90C6-A3E1649E64CF",
              "versionEndExcluding": "1.1.66",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:vostro_3710:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5DB3716-CB23-472A-B125-133B6D20AEB5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:vostro_3910_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6FCBF9E-D794-44A8-A8A0-DF771DA3CFE4",
              "versionEndExcluding": "1.1.66",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:vostro_3910:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3897CDF5-2199-4721-95A9-105CBB2E50E1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:vostro_5320_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B10FB6B0-7B68-4FA6-AAED-555C4B73A767",
              "versionEndExcluding": "1.1.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:vostro_5320:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "03C7C578-C580-4D87-B097-078BDBC6C146",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:vostro_5620_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "51AC9491-0504-476F-8B05-AFCCEBC39196",
              "versionEndExcluding": "1.4.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:vostro_5620:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8876DEA0-1BC6-43FA-9124-F0E307961E03",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:vostro_7620_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA68A47-E67F-46F4-A11F-EFAD57854A3C",
              "versionEndExcluding": "1.2.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:vostro_7620:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "01EAC888-0C54-41B8-8FB5-5E3DAE0F9FE9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:xps_17_9720_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "71524B51-16E5-475C-AF85-11F992846E52",
              "versionEndExcluding": "1.6.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:xps_17_9720:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CFDED31E-C2D7-4075-B046-7AB2062247A6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user could potentially exploit this vulnerability by consuming excess memory in order to cause the application to crash."
    },
    {
      "lang": "es",
      "value": "Las versiones de la BIOS de Dell contienen una vulnerabilidad de Falta de Liberaci\u00f3n de Recursos despu\u00e9s del Tiempo de Vida Efectivo. Un usuario administrador local autenticado podr\u00eda explotar esta vulnerabilidad al consumir un exceso de memoria para causar un bloqueo de la aplicaci\u00f3n"
    }
  ],
  "id": "CVE-2022-31222",
  "lastModified": "2024-11-21T07:04:10.070",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "LOW",
          "baseScore": 2.3,
          "baseSeverity": "LOW",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 1.4,
        "source": "security_alert@emc.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 4.4,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2022-09-12T19:15:09.103",
  "references": [
    {
      "source": "security_alert@emc.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.dell.com/support/kbdoc/000202196"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.dell.com/support/kbdoc/000202196"
    }
  ],
  "sourceIdentifier": "security_alert@emc.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-401"
        }
      ],
      "source": "security_alert@emc.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-772"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.