CVE-2022-21156

MEDIUM

Intel Trace Analyzer and Collector < 2021.5 - Authenticated Denial of Service via Uninitialized Pointer Access

Title source: llm

Description

Access of uninitialized pointer in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable denial of service via local access.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00639.html

Scores

CVSS v3 5.5

EPSS 0.0022

EPSS Percentile 12.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-824

Status published

Products (1)

intel/trace_analyzer_and_collector < 2021.5

Published Feb 09, 2022

Tracked Since Feb 18, 2026