CVE-2022-30155 
                        Detail
                     
                    
                    
                        
                            
                                
                                    Modified This CVE record has been updated after NVD enrichment efforts were completed. Enrichment data supplied by the NVD may require amendment due to these changes.
                                 
                             
                            
                            Current Description  
                            Windows Kernel Denial of Service Vulnerability
                            
                                
                                    
                                
                                    Analysis
                                        Description 
                                    Windows Kernel Denial of Service Vulnerability.
                                 
                            
                            
                            
                            
                                Metrics 
                                 
                                
                                    CVSS Version 4.0
                                     
                                    CVSS Version 3.x
                                     
                                    CVSS Version 2.0
                                     
                                
                                
                                    
                                        
                                            NVD enrichment efforts reference publicly available information to associate
                                            vector strings. CVSS information contributed by other sources is also
                                            displayed.
                                         
                                     
                                
                                
                                
                                    CVSS 4.0 Severity and Vector Strings: 
                                    
                                    
                                        
                                        
                                        
                                        
                                       
                                             NVD assessment
                                       not yet provided.   
                                     
                                    
                                    
                                    
                                    
                                 
                                
                                
                                    CVSS 3.x Severity and Vector Strings: 
                                    
                                    
                                    
                                    
                                        
                                        
                                            
                                                
                                                
                                                    CNA:   Microsoft Corporation 
                                                
                                             
                                         
                                        
                                        
												Vector:   CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 
                                     
                                    
                                    
                                    
                                    
                                    
                                    
                                 
                                
                                
                                    CVSS 2.0 Severity and Vector Strings:   
                                    
                                    
                                        
                                        
                                        
												Vector:  
													(AV:N/AC:M/Au:N/C:N/I:N/A:C) 
                                     
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                 
                             
                            
                                
                                
                                
                                
                                    References to Advisories, Solutions, and Tools 
                                    
                                        By selecting these links, you will be leaving NIST webspace.
                                        We have provided these links to other web sites because they
                                        may have information that would be of interest to you. No
                                        inferences should be drawn on account of other sites being
                                        referenced, or not, from this page. There may be other web
                                        sites that are more appropriate for your purpose. NIST does
                                        not necessarily endorse the views expressed, or concur with
                                        the facts presented on these sites. Further, NIST does not
                                        endorse any commercial products that may be mentioned on
                                        these sites. Please address comments about this page to [email protected] 
                                    
                                 
                                
                                
                                    Weakness Enumeration 
                                    
                                        
                                        
                                            CWE-ID 
                                            CWE Name 
                                            Source 
                                         
                                         
                                        
                                        
                                            
                                                CWE-193 
                                                
                                             
                                            Off-by-one Error 
                                            
														
														NIST   
														 
                                             
                                         
                                         
                                    
                                 
                                
                                
                                    Change History 
                                     8 change records found show changes 
                                     
                                    
	
		
			 
			
				CVE Modified by Microsoft Corporation  1/02/2025 2:16:19 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30155 
								  
					 
					
						Removed 
						Reference 
						
							
							
							
								http://packetstormsecurity.com/files/167755/Windows-Kernel-nt-MiRelocateImage-Invalid-Read.html 
								  
							
						
								
								
						 
					 
					
						Removed 
						Reference 
						
							
							
							
								https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30155 
								  
							
						
								
								
						 
					 
					
						Removed 
						Reference Type 
						
							
							
							
								http://packetstormsecurity.com/files/167755/Windows-Kernel-nt-MiRelocateImage-Invalid-Read.html Types: Third Party Advisory, VDB Entry 
								  
							
						
								
								
						 
					 
					
						Removed 
						Reference Type 
						
							
							
							
								https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30155 Types: Patch, Vendor Advisory 
								  
							
						
								
								
						 
					 
				 
			
		 
	
		
			 
			
				CVE Modified by CVE  11/21/2024 2:02:16 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://packetstormsecurity.com/files/167755/Windows-Kernel-nt-MiRelocateImage-Invalid-Read.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30155 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Microsoft Corporation  5/14/2024 6:33:31 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
				 
			
		 
	
		
			 
			
				CVE Modified by Microsoft Corporation  12/20/2023 5:15:21 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						Description 
						
							
							
							
								Windows Kernel Denial of Service Vulnerability. 
								  
							
						
							
								Windows Kernel Denial of Service Vulnerability 
								  
					 
				 
			
		 
	
		
			 
			
				CWE Remap by NIST  8/08/2023 10:22:24 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CWE 
						
							
							
							
								CWE-400
 
								  
							
						
							
								CWE-193
 
								  
					 
				 
			
		 
	
		
			 
			
				Modified Analysis by NIST  10/27/2022 12:04:10 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						Reference Type 
						
							
							
							
								http://packetstormsecurity.com/files/167755/Windows-Kernel-nt-MiRelocateImage-Invalid-Read.html No Types Assigned 
								  
							
						
							
								http://packetstormsecurity.com/files/167755/Windows-Kernel-nt-MiRelocateImage-Invalid-Read.html Third Party Advisory, VDB Entry 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Microsoft Corporation  7/15/2022 1:15:08 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://packetstormsecurity.com/files/167755/Windows-Kernel-nt-MiRelocateImage-Invalid-Read.html [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				Initial Analysis by NIST  6/24/2022 11:08:39 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						CVSS V2 
						
							
							
								
								
							
							
						 
							
						
							
								NIST (AV:N/AC:M/Au:N/C:N/I:N/A:C) 
								  
					 
					
						Added 
						CWE 
						
							
							
								
								
							
							
						 
							
						
							
								NIST CWE-400 
								  
					 
					
						Added 
						CPE Configuration 
						
							
							
								
								
							
							
						 
							
						
							
								OR
     *cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*
     *cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:arm64:*
     *cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x86:*
     *cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:arm64:*
     *cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:x86:*
     *cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:arm64:*
     *cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:x86:*
     *cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x86:*
     *cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:arm64:*
     *cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:hololens:*
     *cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:arm64:*
     *cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*
     *cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x86:*
     *cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*
     *cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
     *cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*
     *cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:azure:*:*:* 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30155 No Types Assigned 
								  
							
						
							
								https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30155 Patch, Vendor Advisory 
								  
					 
					
						Added 
						CVSS V2 Metadata 
						
							
							
								
								
							
							
						 
							
						
							
								Victim must voluntarily interact with attack mechanism 
								  
					 
				 
			
		  
	 
                                 
                             
                         
                        
                            
                                Quick Info 
                                CVE Dictionary Entry:  CVE-2022-30155  NVD
                                Published Date:  06/15/2022  NVD
                                Last Modified:  01/02/2025  
                                Source:  Microsoft Corporation