CVE-2022-39006

CWE-362 — Race Condition3 documents3 sources
Severity
5.9MEDIUM
EPSS
0.1%
top 64.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Huawei EmuiHuawei HarmonyosHuawei Magic UI
Timeline
PublishedSep 16
Latest updateSep 17

Description

The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6

Affected Packages6 packages

▶CVEListV5huawei/emui11.0.0, 11.0.1, 12.0.0+2
▶NVDhuawei/emui11.0.0, 11.0.1, 12.0.0+2
▶CVEListV5huawei/magic_ui4.0.0
▶NVDhuawei/magic_ui4.0.0
▶CVEListV5huawei/harmonyos2.0, 2.1+1

🔴Vulnerability Details

2
GHSA
GHSA-pp72-398c-xq3j: The MPTCP module has the race condition vulnerability↗2022-09-17
▶
CVEList
CVE-2022-39006: The MPTCP module has the race condition vulnerability↗2022-09-16
▶
CVE-2022-39006 (MEDIUM CVSS 5.9) | The MPTCP module has the race condi | cvebase.io