Use-after-free in Microsoft Windows and Windows Server - CVE-2022-22034

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU65177

Use-after-free in Microsoft Windows and Windows Server - CVE-2022-22034

Published: July 12, 2022 / Updated: July 13, 2022


Vulnerability identifier: #VU65177
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-22034
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in multiple methods within the win32kfull driver in Microsoft Windows. A local user can run a specially crafted program to trigger a use-after-free error and execute arbitrary code with SYSTEM privileges.

List of vulnerable methods:

  • UMPDDrvStretchBltROP
  • UMPDDrvAlphaBlend
  • UMPDDrvCopyBits
  • UMPDDrvStretchBlt
  • UMPDDrvPlgBlt
  • UMPDDrvTransparentBlt
  • UMPDDrvBitBlt
  • UMPDDrvStrokePath
  • UMPDDrvGradientFill
  • UMPDDrvTextOut

Affected software

Microsoft Windows
Windows Server
Solutions Enabler
Unisphere 360
Unisphere for PowerMax
Unisphere for PowerMax Virtual Appliance
eVASA Provider Virtual Appliance
VASA Provider Standalone
Solutions Enabler Virtual Appliance

How to mitigate CVE-2022-22034

Install updates from vendor's website.

Solutions Enabler - update to 9.2.3.5
Solutions Enabler Virtual Appliance - update to 9.2.3.5
Unisphere 360 - update to 9.2.3.8
Unisphere for PowerMax - update to 9.2.3.20
Unisphere for PowerMax Virtual Appliance - update to 9.2.3.20
eVASA Provider Virtual Appliance - update to 9.2.4.11
VASA Provider Standalone - update to 9.2.4.21

External References

Related Security Bulletins