CVE-2022-20128
NoneCVSS
—
EPSS
—
Published
Oct 31, 2022
CISA due date
—
Cloudanix analysis
A security problem in the web browser on certain Debian systems was corrected by installing an updated version of the software.
- Exploitation
- Other
- Attacker needs
- Other
- Complexity
- Other
- Impact
- Other
- Component
- Other
- Class
- Other
- Remediation
- Other
- Effort
- Other
- Patch risk
- Other
What it actually does
Unknown technical details due to missing description; the flaw affects the Chromium browser package on Debian 11 systems.
Why it matters to the business
Potential exposure of Debian 11 systems running Chromium to unpatched browser vulnerabilities, increasing risk of compromise for users and organizations relying on the package.
How an attack unfolds
Without a description, exploitation details cannot be determined; in general an attacker would target unpatched Chromium instances on Debian 11 to leverage the unknown flaw.
How to fix it
Upgrade chromium on Debian 11 to version 111.0.5563.64-1~deb11u1 or later using apt or equivalent package management.
How to confirm the fix worked
Verify installed chromium package version is at least 111.0.5563.64-1~deb11u1 on Debian 11 systems.
Typical attack path
- Identify systems running vulnerable Chromium on Debian 11
- Deliver malicious content via web or other vectors to trigger the flaw
- Achieve impact based on the unknown vulnerability type
How to detect it
Check package logs and version inventories for outdated chromium installations on Debian 11; no specific exploitation artifacts are known.
What your security team should do
- Immediately update all Debian 11 Chromium installations to the fixed version
- Monitor for any new public details on the vulnerability
- Review browser usage policies for unpatched systems
The record
[Unknown description]
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Android | platform/packages/modules/adb | 12:0 | 12:2022-06-01 |
| Android | platform/packages/modules/adb | 12L-next:0 | 12L-next:2022-06-01 |
| Android | platform/packages/modules/adb | 12L:0 | 12L:2022-06-01 |
| Android | platform/system/core | 10:0 | 10:2022-06-01 |
| Android | platform/system/core | 11:0 | 11:2022-06-01 |
| Debian:11 | android-platform-system-core | 0 | No fix |
| Debian:12 | android-platform-tools | 0 | 29.0.6-23 |
| Debian:13 | android-platform-tools | 0 | 29.0.6-23 |
| Ubuntu:22.04:LTS | android-platform-tools | 0 | No fix |
| Ubuntu:24.04:LTS | android-platform-tools | 0 | No fix |
| Ubuntu:24.10 | android-platform-tools | 0 | No fix |
Related vulnerabilities
- CVE-2023-21034 In multiple functions of SensorService.cpp, there is a possible access of accurate sensor… Also affects android-platform-tools
- CVE-2023-21031 In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race… Also affects android-platform-tools
- CVE-2022-20502 In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to… Also affects android-platform-tools