CVE-2022-40982

Katalog CVE

CVSS 6.5 · Medium EPSS 3,0%

Kerentanan Information Exposure through Microarchitectural State after Transient Execution pada redhat enterprise linux, xen +55 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Rincian

Terbit di NVD

11 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1342: Information Exposure through Microarchitectural State after Transient Execution
CWE-203: Observable Discrepancy

EPSS (30 hari)

3,0% peluang dieksploitasi; lebih tinggi dari 87,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 539 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html exploit · mitigasi · advisory vendor
• https://xenbits.xen.org/xsa/advisory-435.html mitigasi · advisory pihak ketiga
• https://access.redhat.com/solutions/7027704 advisory pihak ketiga
• https://aws.amazon.com/security/security-bulletins/AWS-2023-007/ advisory pihak ketiga
• https://downfall.page exploit · deskripsi teknis · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20230811-0001/ advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5474 mailing list · advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5475 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4...
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNI...
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OL7WI2TJCWSZIQP...
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7WO5JM74YJSYAE...
• http://xenbits.xen.org/xsa/advisory-435.html