CVE-2022-21125 | Severity.io

Description

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Related CPE's

xen

x86

Vulnerable

fedoraproject

fedora

intel

sgx_dcap

intel

sgx_psw

intel

sgx_sdk

vmware

esxi

debian

debian_linux

References

http://www.openwall.com/lists/oss-security/2022/06/16/1

Mailing ListPatchThird Party Advisory

http://xenbits.xen.org/xsa/advisory-404.html

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/

https://security.gentoo.org/glsa/202208-23

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220624-0008/

Third Party Advisory

https://www.debian.org/security/2022/dsa-5173

Third Party Advisory

https://www.debian.org/security/2022/dsa-5178

Third Party Advisory

https://www.debian.org/security/2022/dsa-5184

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html

PatchVendor Advisory

Weaknesses

[email protected]

Primary

CWE-459

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.5 · Medium

CVSS V3.1
CVSS V3.0
CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-06-15T20:15:17.547

3 years ago

Last modified

2023-11-07T03:43:25.357

1 year ago