CVE-2022-1215 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 13%

Affected Products (NVD)

Vendor	Product	Version
freedesktop	libinput	1.10.0 ≤ 𝑥 < 1.18.2
freedesktop	libinput	1.19.0 ≤ 𝑥 < 1.19.4
freedesktop	libinput	1.20.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

libinput

bookworm	1.22.1-1 fixed
bullseye	no-dsa
buster	no-dsa
sid	1.26.2-1 fixed
stretch	not-affected
trixie	1.26.2-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

libinput

bionic	Fixed 1.10.4-1ubuntu0.18.04.3 released
focal	Fixed 1.15.5-1ubuntu0.3 released
impish	Fixed 1.18.1-1ubuntu0.1 released
jammy	Fixed 1.20.0-1ubuntu0.1 released
kinetic	not-affected
lunar	not-affected
xenial	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

libinput-devel

suse enterprise desktop 15 SP3	1.10.5-150000.3.3.1 fixed
suse enterprise desktop 15 SP4	1.19.4-150400.1.8 fixed
suse enterprise desktop 15 SP5	1.21.0-150500.1.2 fixed
suse enterprise desktop 15 SP6	1.25.0-150600.1.3 fixed
suse enterprise desktop 15 SP7	1.27.1-150700.1.3 fixed
suse enterprise sap 15	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP1	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP2	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP3	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP4	1.19.4-150400.1.8 fixed
suse enterprise sap 15 SP5	1.21.0-150500.1.2 fixed
suse enterprise sap 15 SP6	1.25.0-150600.1.3 fixed
suse enterprise sap 15 SP7	1.27.1-150700.1.3 fixed
suse enterprise server 15	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP1	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP2	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP3	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP4	1.19.4-150400.1.8 fixed
suse enterprise server 15 SP5	1.21.0-150500.1.2 fixed
suse enterprise server 15 SP6	1.25.0-150600.1.3 fixed
suse enterprise server 15 SP7	1.27.1-150700.1.3 fixed

libinput-tools

suse enterprise desktop 15 SP3	1.10.5-150000.3.3.1 fixed
suse enterprise desktop 15 SP4	1.19.4-150400.1.8 fixed
suse enterprise desktop 15 SP5	1.21.0-150500.1.2 fixed
suse enterprise desktop 15 SP6	1.25.0-150600.1.3 fixed
suse enterprise desktop 15 SP7	1.27.1-150700.1.3 fixed
suse enterprise sap 15	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP1	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP2	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP3	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP4	1.19.4-150400.1.8 fixed
suse enterprise sap 15 SP5	1.21.0-150500.1.2 fixed
suse enterprise sap 15 SP6	1.25.0-150600.1.3 fixed
suse enterprise sap 15 SP7	1.27.1-150700.1.3 fixed
suse enterprise server 15	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP1	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP2	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP3	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP4	1.19.4-150400.1.8 fixed
suse enterprise server 15 SP5	1.21.0-150500.1.2 fixed
suse enterprise server 15 SP6	1.25.0-150600.1.3 fixed
suse enterprise server 15 SP7	1.27.1-150700.1.3 fixed

libinput-udev

suse enterprise desktop 15 SP3	1.10.5-150000.3.3.1 fixed
suse enterprise desktop 15 SP4	1.19.4-150400.1.8 fixed
suse enterprise desktop 15 SP5	1.21.0-150500.1.2 fixed
suse enterprise desktop 15 SP6	1.25.0-150600.1.3 fixed
suse enterprise desktop 15 SP7	1.27.1-150700.1.3 fixed
suse enterprise sap 15	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP1	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP2	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP3	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP4	1.19.4-150400.1.8 fixed
suse enterprise sap 15 SP5	1.21.0-150500.1.2 fixed
suse enterprise sap 15 SP6	1.25.0-150600.1.3 fixed
suse enterprise sap 15 SP7	1.27.1-150700.1.3 fixed
suse enterprise server 15	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP1	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP2	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP3	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP4	1.19.4-150400.1.8 fixed
suse enterprise server 15 SP5	1.21.0-150500.1.2 fixed
suse enterprise server 15 SP6	1.25.0-150600.1.3 fixed
suse enterprise server 15 SP7	1.27.1-150700.1.3 fixed

libinput10

suse enterprise desktop 15 SP3	1.10.5-150000.3.3.1 fixed
suse enterprise desktop 15 SP4	1.19.4-150400.1.8 fixed
suse enterprise desktop 15 SP5	1.21.0-150500.1.2 fixed
suse enterprise desktop 15 SP6	1.25.0-150600.1.3 fixed
suse enterprise desktop 15 SP7	1.27.1-150700.1.3 fixed
suse enterprise sap 15	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP1	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP2	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP3	1.10.5-150000.3.3.1 fixed
suse enterprise sap 15 SP4	1.19.4-150400.1.8 fixed
suse enterprise sap 15 SP5	1.21.0-150500.1.2 fixed
suse enterprise sap 15 SP6	1.25.0-150600.1.3 fixed
suse enterprise sap 15 SP7	1.27.1-150700.1.3 fixed
suse enterprise server 15	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP1	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP2	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP3	1.10.5-150000.3.3.1 fixed
suse enterprise server 15 SP4	1.19.4-150400.1.8 fixed
suse enterprise server 15 SP5	1.21.0-150500.1.2 fixed
suse enterprise server 15 SP6	1.25.0-150600.1.3 fixed
suse enterprise server 15 SP7	1.27.1-150700.1.3 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

libinput

RHEL 8	0:1.16.3-3.el8_6 fixed
RHEL 8.6 AUS	0:1.16.3-3.el8_6 fixed
RHEL 8.6 E4S	0:1.16.3-3.el8_6 fixed
RHEL 8.6 EUS	0:1.16.3-3.el8_6 fixed
RHEL 8.6 TUS	0:1.16.3-3.el8_6 fixed
RHEL 9	0:1.19.3-2.el9_0 fixed

libinput-devel

RHEL 8	0:1.16.3-3.el8_6 fixed
RHEL 8.6 AUS	0:1.16.3-3.el8_6 fixed
RHEL 8.6 E4S	0:1.16.3-3.el8_6 fixed
RHEL 8.6 EUS	0:1.16.3-3.el8_6 fixed
RHEL 8.6 TUS	0:1.16.3-3.el8_6 fixed
RHEL 9	0:1.19.3-2.el9_0 fixed

libinput-utils

RHEL 8	0:1.16.3-3.el8_6 fixed
RHEL 8.6 AUS	0:1.16.3-3.el8_6 fixed
RHEL 8.6 E4S	0:1.16.3-3.el8_6 fixed
RHEL 8.6 EUS	0:1.16.3-3.el8_6 fixed
RHEL 8.6 TUS	0:1.16.3-3.el8_6 fixed
RHEL 9	0:1.19.3-2.el9_0 fixed

Common Weakness Enumeration

CWE-134 - Use of Externally-Controlled Format String
The software uses a function that accepts a format string as an argument, but the format string originates from an external source.

References

https://seclists.org/oss-sec/2022/q2/47

https://security.gentoo.org/glsa/202310-14

https://seclists.org/oss-sec/2022/q2/47

https://security.gentoo.org/glsa/202310-14