CVE-2022-40982

Sažetak

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Reference

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html
https://downfall.page
https://aws.amazon.com/security/security-bulletins/AWS-2023-007/
https://access.redhat.com/solutions/7027704
https://xenbits.xen.org/xsa/advisory-435.html
https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html
https://security.netapp.com/advisory/ntap-20230811-0001/
https://www.debian.org/security/2023/dsa-5475
https://www.debian.org/security/2023/dsa-5474
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OL7WI2TJCWSZIQP2RIOLWHOKLM25M44J/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/
https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/

CVSS

Base:	6.5
Impact:	4.0
Exploitability:	2.0

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	-

Impact

Povjerljivost	Cjelovitost	Dostupnost
HIGH	NONE	NONE

CVSS vektor

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Zadnje važnije ažuriranje

07-11-2023 - 03:52

Objavljeno

11-08-2023 - 03:15