Vulnerability · Published Sep 14, 2022 · Assigned by mitre

CVE-2022-40673

High 7.8

In plain English

A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).

Severity (CVSS NVD)7.8High

Exploit odds (30 days)0.4%top 69.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

KDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper::flushPageCache.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/JonMagon/KDiskMark/releases/tag/3.1.0 x_refsource_MISC
https://github.com/JonMagon/KDiskMark/commit/3c90083a4f5ba3f240a797e509d818221542bbdc x_refsource_MISC
https://github.com/JonMagon/KDiskMark/compare/3.0.0...3.1.0 x_refsource_MISC
[oss-security] 20220914 insufficiently protected D-Bus interface in KDiskMark 3.0.0 (CVE-2022-40673) mailing-list, x_refsource_MLIST
FEDORA-2022-97149edce1 vendor-advisory, x_refsource_FEDORA