CVE-2022-36351
published 2023-08-11CVE-2022-36351: Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of…
PriorityP425medium6.5CVSS 3.1
AVAACLPRNUINSUCNINAH
EPSS
0.61%
45.2th percentile
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | firmware-nonfree | < firmware-nonfree 20240610-1 (forky) | firmware-nonfree 20240610-1 (forky) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| intel | killer | < 34.22.1163 | 34.22.1163 |
| intel | proset_wireless_wifi | < 22.200 | 22.200 |
| intel | uefi_firmware | < 3.2.20.23023 | 3.2.20.23023 |
| intel_proset | wireless_wifi_and_killer_wifi_software | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv6.5MEDIUM
vendor_debian4.3MEDIUM
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-36351: Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable d
osv·2023-08-11·CVSS 6.5
CVE-2022-36351 [MEDIUM] CVE-2022-36351: Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable d
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.
GHSA
GHSA-vxgp-5w4f-87hm: Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable d
ghsa_unreviewed·2023-08-11
CVE-2022-36351 [MEDIUM] CWE-20 GHSA-vxgp-5w4f-87hm: Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable d
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Red Hat
hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi
vendor_redhat·2023-08-08·CVSS 4.3
CVE-2022-36351 [MEDIUM] CWE-20 hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi
hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.
An improper input validation flaw was found in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software that may allow an unauthenticated user to enable a denial of service via adjacent access.
Mitigation: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Debian
CVE-2022-36351: firmware-nonfree - Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) W...
vendor_debian·2022·CVSS 4.3
CVE-2022-36351 [MEDIUM] CVE-2022-36351: firmware-nonfree - Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) W...
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 20240610-1)
sid: resolved (fixed in 20240610-1)
trixie: resolved (fixed in 20240610-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.htmlhttps://lists.debian.org/debian-lts-announce/2023/09/msg00043.htmlhttps://lists.fedoraproject.org/archives/list/[email protected]/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/https://lists.fedoraproject.org/archives/list/[email protected]/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/https://lists.fedoraproject.org/archives/list/[email protected]/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.htmlhttps://lists.debian.org/debian-lts-announce/2023/09/msg00043.htmlhttps://lists.fedoraproject.org/archives/list/[email protected]/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/https://lists.fedoraproject.org/archives/list/[email protected]/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/https://lists.fedoraproject.org/archives/list/[email protected]/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/
2023-08-11
Published