CVE-2022-0987
CVE-2022-0987
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
28 jun 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.
Productos afectados
n/a · PackageKit