« Volver al listado

CVE-2022-38014

Estado: ModificadaAlta (7)—

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Microsoft — Azure IOT Edge FOR LinuxMicrosoft — Windows Subsystem FOR Linux

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-38014",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-38014",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-15T13:58:48.805846Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secure@microsoft.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "Microsoft",
          "product": "Azure EFLOW",
          "versions": [
            {
              "status": "affected",
              "version": "1.4.0.0",
              "lessThan": "1.4.2.12122 LTS",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Windows Subsystem for Linux (WSL2)",
          "versions": [
            {
              "status": "affected",
              "version": "5.0.0.0",
              "lessThan": "5.15.62.1",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-11-09T22:15:15.367",
  "references": [
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38014",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38014",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-362"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability"
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de elevación de privilegios del kernel de Windows Subsystem para Linux (WSL2)"
    }
  ],
  "lastModified": "2026-08-10T16:18:14.213",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:azure_iot_edge_for_linux:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58AC9A0E-9E69-4CF3-8064-02C1BF4EFE42"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:windows_subsystem_for_linux:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6CE00820-9E9F-4E1B-ADD1-35797133AA4F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}