Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2022-40982
HistoryAug 11, 2023 - 3:15 a.m.

CVE-2022-40982

2023-08-1103:15:00
CWE-203
[email protected]
web.nvd.nist.gov
358
23
cve-2022-40982
information exposure
microarchitectural state
transient execution
vector execution units
intel processors
authenticated user
information disclosure
local access
nvd

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

51.0%

JSON

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel® Processors may allow an authenticated user to potentially enable information disclosure via local access.

References

Social References

More

Related

oraclelinux 8
prion 1
nessus 62
openvas 49
talosblog 1
debian 5
ubuntucve 1
alpinelinux 1
f5 1
ics 1
osv 22
debiancve 1
xen 1
redhatcve 1
amazon 1
cloudlinux 1
veracode 1
fedora 4
chrome 1
cloudfoundry 1
rocky 2
citrix 1
thn 2
ubuntu 17
mageia 3
trellix 2
hp 1
redhat 6
centos 1
oraclelinux
oraclelinux
microcode_ctl security update
2023-08-15 00:00:00
microcode_ctl security update
2023-08-15 00:00:00
Unbreakable Enterprise kernel-container security update
2023-09-11 00:00:00
prion
prion
Information disclosure
2023-08-11 03:15:00
nessus
nessus
Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2023-12785)
2023-09-11 00:00:00
Oracle Linux 8 : microcode_ctl (ELSA-2023-12723)
2023-08-15 00:00:00
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12782)
2023-09-11 00:00:00
openvas
openvas
Missing Linux Kernel mitigations for 'GDS - Gather Data Sampling' hardware vulnerability (Downfall, INTEL-SA-00828)
2023-08-11 00:00:00
Debian: Security Advisory (DLA-3524-1)
2023-08-18 00:00:00
Debian: Security Advisory (DSA-5475-1)
2023-08-14 00:00:00
talosblog
talosblog
Recapping the top stories from Black Hat and DEF CON
2023-08-17 18:00:32
debian
debian
[SECURITY] [DLA 3524-1] linux security update
2023-08-10 19:42:10
[SECURITY] [DSA 5475-1] linux security update
2023-08-11 07:57:37
[SECURITY] [DLA 3525-1] linux-5.10 security update
2023-08-11 17:21:29
ubuntucve
ubuntucve
CVE-2022-40982
2023-08-08 00:00:00
alpinelinux
alpinelinux
CVE-2022-40982
2023-08-11 03:15:00
f5
f5
K000135795 : Downfall Attacks CVE-2022-40982
2023-08-09 00:00:00
ics
ics
Siemens SIMATIC IPCs
2023-09-14 12:00:00
osv
osv
linux - security update
2023-08-10 00:00:00
CVE-2022-40982
2023-08-11 03:15:14
linux-5.10 - security update
2023-08-10 00:00:00
debiancve
debiancve
CVE-2022-40982
2023-08-11 03:15:00
xen
xen
x86/Intel: Gather Data Sampling
2023-08-08 15:53:00
redhatcve
redhatcve
CVE-2022-40982
2023-08-08 17:20:33
amazon
amazon
Medium: microcode_ctl
2023-08-03 18:10:00
cloudlinux
cloudlinux
microcode_ctl: Fix of CVE-2022-40982
2023-08-30 17:12:48
veracode
veracode
Information Disclosure
2023-08-10 23:12:56
fedora
fedora
[SECURITY] Fedora 38 Update: xen-4.17.2-1.fc38
2023-08-16 01:22:32
[SECURITY] Fedora 37 Update: xen-4.16.5-1.fc37
2023-08-27 00:50:59
[SECURITY] Fedora 38 Update: microcode_ctl-2.1-55.1.fc38
2023-08-16 01:22:33
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2023-08-01 00:00:00
cloudfoundry
cloudfoundry
USN-6286-1: Intel Microcode vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
rocky
rocky
microcode_ctl bug fix and enhancement update
2023-09-19 12:08:46
microcode_ctl bug fix and enhancement update
2023-09-19 12:10:01
citrix
citrix
Citrix Hypervisor Security Bulletin for CVE-2023-20569, CVE-2023-34319 and CVE-2022-40982
2023-08-08 17:07:04
thn
thn
iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A- and M-Series CPUs
2023-10-26 16:49:00
Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs
2023-08-09 15:39:00
ubuntu
ubuntu
Intel Microcode vulnerabilities
2023-08-14 00:00:00
Linux kernel vulnerabilities
2023-08-31 00:00:00
Linux kernel (Raspberry Pi) vulnerabilities
2023-09-06 00:00:00
mageia
mageia
Updated microcode packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel-linus packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel packages fix security vulnerabilities
2023-08-23 22:56:41
trellix
trellix
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
hp
hp
Intel 2023.3 IPU – BIOS August 2023 Security Updates
2023-08-08 00:00:00
redhat
redhat
(RHSA-2023:7423) Important: kernel security update
2023-11-21 14:52:31
(RHSA-2023:7424) Important: kernel-rt security update
2023-11-21 14:52:34
(RHSA-2023:7379) Important: kernel-rt security update
2023-11-21 08:15:24
centos
centos
bpftool, kernel, perf, python security update
2024-01-12 19:36:38

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

51.0%

JSON
Related for CVE-2022-40982
oraclelinux8prion1nessus62openvas49talosblog1debian5ubuntucve1alpinelinux1f51ics1osv22debiancve1xen1redhatcve1amazon1cloudlinux1veracode1fedora4chrome1cloudfoundry1rocky2citrix1thn2ubuntu17mageia3trellix2hp1redhat6centos1