CVE-2022-37409: Medium severity intel integrated performance primitives vulnerability
Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-37409?
The severity of CVE-2022-37409 is medium with a severity value of 5.5.
What is the description of CVE-2022-37409?
CVE-2022-37409 is a vulnerability in the Intel(R) IPP Cryptography software before version 2021.6, which may allow an authenticated user to potentially enable information disclosure via local access.
How does CVE-2022-37409 impact the Intel Integrated Performance Primitives Cryptography software?
CVE-2022-37409 affects the Intel Integrated Performance Primitives Cryptography software before version 2021.6.
How can an authenticated user potentially enable information disclosure via local access in CVE-2022-37409?
An authenticated user can potentially enable information disclosure via local access by exploiting the vulnerability in the Intel(R) IPP Cryptography software before version 2021.6.
Is there any fix available for CVE-2022-37409?
Yes, Intel has released a fix for CVE-2022-37409. It is recommended to update to version 2021.6 or later of the Intel Integrated Performance Primitives Cryptography software.