ALPINE-CVE-2022-23467
- Source
- https://security.alpinelinux.org/vuln/CVE-2022-23467
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2022-23467.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ALPINE-CVE-2022-23467
- Upstream
- Published
- 2022-12-05T20:15:10Z
- Modified
- 2026-10-27T08:33:39Z
- Severity
-
- 4.6 (Medium) CVSS_V3 - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the
razer_attr_read_dpi_stages, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices. - References