CVE-2022-25368

Katalog CVE

CVSS 4.7 · Medium EPSS 0,30%

Kerentanan pada amperecomputing ampere altra max firmware, amperecomputing ampere altra firmware +20 lainnya. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.

Rincian

Terbit di NVD

10 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 20,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.html advisory vendor
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb patch · deskripsi teknis · advisory vendor
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23960 advisory pihak ketiga · vdb entry