CVE-2022-22710 - 漏洞详情

CVE-2022-22710 (CNNVD-202202-604)

MEDIUM

中文标题:

Microsoft Windows Common Log File System Driver资源管理错误漏洞

英文标题:

Windows Common Log File System Driver Denial of Service Vulnerability

CVSS分数: 5.5

发布时间: 2022-02-09 16:37:02

漏洞类型: 资源管理错误

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

Microsoft Windows Common Log File System Driver是美国微软（Microsoft）公司的通用日志文件系统 (CLFS) API 提供了一个高性能、通用的日志文件子系统，专用客户端应用程序可以使用该子系统并且多个客户端可以共享以优化日志访问。 Microsoft Windows Common Log File System Driver存在资源管理错误漏洞。以下产品和版本受到影响：Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows 10 Version 1909 for 32-bit Systems,Windows 10 Version 1909 for x64-based Systems,Windows 10 Version 1909 for ARM64-based Systems,Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-based Systems,Windows 10 Version 21H1 for 32-bit Systems,Windows Server 2022,Windows Server 2022 (Server Core installation),Windows Server 2022 Azure Edition Core Hotpatch,Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2 for ARM64-based Systems,Windows Server, version 20H2 (Server Core Installation),Windows 11 for x64-based Systems,Windows 11 for ARM64-based Systems,Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems,Windows 10 for 32-bit Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windows Server 2016 (Server Core installation),Windows 7 for 32-bit Systems Service Pack 1,Windows 7 for x64-based Systems Service Pack 1,Windows 8.1 for 32-bit systems,Windows 8.1 for x64-based systems,Windows RT 8.1,Windows Server 2008 for 32-bit Systems Service Pack 2,Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation),Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation),Windows Server 2008 R2 for x64-based Systems Service Pack 1,Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation),Windows Server 2012,Windows Server 2012 (Server Core installation),Windows Server 2012 R2,Windows Server 2012 R2 (Server Core installation)

英文描述:

NOT_EXTRACTED

CWE类型:

（暂无数据）

受影响产品

厂商	产品	版本	版本范围	平台	CPE
Microsoft	Windows 10 Version 1809	-	< 10.0.17763.2565	-	`cpe:2.3:a:microsoft:windows_10_version_1809::::::::`
Microsoft	Windows Server 2019	-	< 10.0.17763.2565	-	`cpe:2.3:a:microsoft:windows_server_2019::::::::`
Microsoft	Windows Server 2019 (Server Core installation)	-	< 10.0.17763.2565	-	`cpe:2.3:a:microsoft:windows_server_2019_(server_core_installation)::::::::`
Microsoft	Windows 10 Version 1909	-	< 10.0.18363.2094	-	`cpe:2.3:a:microsoft:windows_10_version_1909::::::::`
Microsoft	Windows 10 Version 21H1	-	< 10.0.19043.1526	-	`cpe:2.3:a:microsoft:windows_10_version_21h1::::::::`
Microsoft	Windows Server 2022	-	< 10.0.20348.524	-	`cpe:2.3:a:microsoft:windows_server_2022::::::::`
Microsoft	Windows 10 Version 20H2	-	< 10.0.19042.1526	-	`cpe:2.3:a:microsoft:windows_10_version_20h2::::::::`
Microsoft	Windows Server version 20H2	-	< 10.0.19042.1526	-	`cpe:2.3:a:microsoft:windows_server_version_20h2::::::::`
Microsoft	Windows 11 version 21H2	-	< 10.0.22000.493	-	`cpe:2.3:a:microsoft:windows_11_version_21h2::::::::`
Microsoft	Windows 10 Version 21H2	-	< 10.0.19044.1526	-	`cpe:2.3:a:microsoft:windows_10_version_21h2::::::::`
Microsoft	Windows 10 Version 1507	-	< 10.0.10240.19204	-	`cpe:2.3:a:microsoft:windows_10_version_1507::::::::`
Microsoft	Windows 10 Version 1607	-	< 10.0.14393.4946	-	`cpe:2.3:a:microsoft:windows_10_version_1607::::::::`
Microsoft	Windows Server 2016	-	< 10.0.14393.4946	-	`cpe:2.3:a:microsoft:windows_server_2016::::::::`
Microsoft	Windows Server 2016 (Server Core installation)	-	< 10.0.14393.4946	-	`cpe:2.3:a:microsoft:windows_server_2016_(server_core_installation)::::::::`
Microsoft	Windows 7	-	< 6.1.7601.25860	-	`cpe:2.3:a:microsoft:windows_7::::::::`
Microsoft	Windows 7 Service Pack 1	-	< 6.1.7601.25860	-	`cpe:2.3:a:microsoft:windows_7_service_pack_1::::::::`
Microsoft	Windows 8.1	-	< 6.3.9600.20269	-	`cpe:2.3:a:microsoft:windows_8.1::::::::`
Microsoft	Windows Server 2008 Service Pack 2	-	< 6.0.6003.21374	-	`cpe:2.3:a:microsoft:windows_server_2008_service_pack_2::::::::`
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	-	< 6.0.6003.21374	-	`cpe:2.3:a:microsoft:windows_server_2008_service_pack_2_(server_core_installation)::::::::`
Microsoft	Windows Server 2008 Service Pack 2	-	< 6.0.6003.21374	-	`cpe:2.3:a:microsoft:windows_server_2008__service_pack_2::::::::`
Microsoft	Windows Server 2008 R2 Service Pack 1	-	< 6.1.7601.25860	-	`cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1::::::::`
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	-	< 6.1.7601.25860	-	`cpe:2.3:a:microsoft:windows_server_2008_r2_service_pack_1_(server_core_installation)::::::::`
Microsoft	Windows Server 2012	-	< 6.2.9200.23605	-	`cpe:2.3:a:microsoft:windows_server_2012::::::::`
Microsoft	Windows Server 2012 (Server Core installation)	-	< 6.2.9200.23605	-	`cpe:2.3:a:microsoft:windows_server_2012_(server_core_installation)::::::::`
Microsoft	Windows Server 2012 R2	-	< 6.3.9600.20269	-	`cpe:2.3:a:microsoft:windows_server_2012_r2::::::::`
Microsoft	Windows Server 2012 R2 (Server Core installation)	-	< 6.3.9600.20269	-	`cpe:2.3:a:microsoft:windows_server_2012_r2_(server_core_installation)::::::::`
microsoft	windows_10	-	-	-	`cpe:2.3:o:microsoft:windows_10:-::::::x64:`
microsoft	windows_10	20h2	-	-	`cpe:2.3:o:microsoft:windows_10:20h2::::::arm64:`
microsoft	windows_10	21h1	-	-	`cpe:2.3:o:microsoft:windows_10:21h1::::::arm64:`
microsoft	windows_10	21h2	-	-	`cpe:2.3:o:microsoft:windows_10:21h2::::::arm64:`
microsoft	windows_10	1607	-	-	`cpe:2.3:o:microsoft:windows_10:1607::::::x64:`
microsoft	windows_10	1809	-	-	`cpe:2.3:o:microsoft:windows_10:1809::::::arm64:`
microsoft	windows_10	1909	-	-	`cpe:2.3:o:microsoft:windows_10:1909::::::arm64:`
microsoft	windows_11	-	-	-	`cpe:2.3:o:microsoft:windows_11:-::::::arm64:`
microsoft	windows_7	sp1	-	-	`cpe:2.3:o:microsoft:windows_7:sp1::::::x64:`
microsoft	windows_8.1	-	-	-	`cpe:2.3:o:microsoft:windows_8.1:-::::::x64:`
microsoft	windows_rt_8.1	-	-	-	`cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*`
microsoft	windows_server	20h2	-	-	`cpe:2.3:o:microsoft:windows_server:20h2:::::::*`
microsoft	windows_server	2022	-	-	`cpe:2.3:o:microsoft:windows_server:2022:::::::*`
microsoft	windows_server_2008	-	-	-	`cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::x64:*`
microsoft	windows_server_2008	r2	-	-	`cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*`
microsoft	windows_server_2012	-	-	-	`cpe:2.3:o:microsoft:windows_server_2012:-:::::::*`
microsoft	windows_server_2012	r2	-	-	`cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*`
microsoft	windows_server_2016	-	-	-	`cpe:2.3:o:microsoft:windows_server_2016:-:::::::*`
microsoft	windows_server_2019	-	-	-	`cpe:2.3:o:microsoft:windows_server_2019:-:::::::*`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）

临时解决方案:

（暂无数据）

参考链接

Windows Common Log File System Driver Denial of Service Vulnerability vendor-advisory
cve.org

访问

CVSS评分详情

3.1 (cna)

MEDIUM

5.5

CVSS向量: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

机密性

NONE

完整性

NONE

可用性

HIGH

时间信息

发布时间:

2022-02-09 16:37:02

修改时间:

2025-01-02 18:28:03

创建时间:

2025-11-11 15:37:19

更新时间:

2025-11-11 15:57:09

利用信息

暂无可利用代码信息

数据源详情

数据源	记录ID	版本	提取时间
CVE	`cve_CVE-2022-22710`	2025-11-11 15:21:18	2025-11-11 07:37:19
NVD	`nvd_CVE-2022-22710`	2025-11-11 14:58:14	2025-11-11 07:45:35
CNNVD	`cnnvd_CNNVD-202202-604`	2025-11-11 15:10:49	2025-11-11 07:57:09

版本与语言

当前版本: v3

主要语言: EN

支持语言:

EN ZH

安全公告

暂无安全公告信息

变更历史

v3 CNNVD

2025-11-11 15:57:09

vulnerability_type: 未提取 → 资源管理错误; cnnvd_id: 未提取 → CNNVD-202202-604; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']

查看详细变更

vulnerability_type: 未提取 -> 资源管理错误
cnnvd_id: 未提取 -> CNNVD-202202-604
data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']

v2 NVD

2025-11-11 15:45:35

affected_products_count: 27 → 45; data_sources: ['cve'] → ['cve', 'nvd']

查看详细变更

affected_products_count: 27 -> 45
data_sources: ['cve'] -> ['cve', 'nvd']

CVE-2022-22710 (CNNVD-202202-604)

中文标题:

Microsoft Windows Common Log File System Driver资源管理错误漏洞

英文标题:

Windows Common Log File System Driver Denial of Service Vulnerability

漏洞描述

中文描述:

英文描述:

CWE类型:

标签:

受影响产品

解决方案

中文解决方案:

英文解决方案:

临时解决方案:

参考链接

CVSS评分详情

3.1 (cna)

时间信息

利用信息

数据源详情

版本与语言

安全公告

变更历史