Lucene search

[email protected]NVD:CVE-2022-25368

HistoryMar 10, 2022 - 5:47 p.m.

CVE-2022-25368

2022-03-1017:47:07

[email protected]

web.nvd.nist.gov

spectre bhb

variant

cpu branch history

mispredicted branches

cache allocation

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

23.3%

JSON

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim’s hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.

Affected configurations

Nvd

Node

amperecomputingampere_altra_max_firmwareMatch-

AND

amperecomputingampere_altra_maxMatch-

Node

amperecomputingampere_altra_firmwareMatch-

AND

amperecomputingampere_altraMatch-

Node

armneoverse-e1_firmwareMatch-

AND

armneoverse-e1Match-

Node

armneoverse-v1_firmwareMatch-

AND

armneoverse-v1Match-

Node

armcortex-a57_firmwareMatch-

AND

armcortex-a57Match-

Node

armcortex-a65_firmwareMatch-

AND

armcortex-a65Match-

Node

armcortex-a65ae_firmwareMatch-

AND

armcortex-a65aeMatch-

Node

armcortex-a72_firmwareMatch-

AND

armcortex-a72Match-

Node

armcortex-a73_firmwareMatch-

AND

armcortex-a73Match-

Node

armcortex-a75_firmwareMatch-

AND

armcortex-a75Match-

Node

armcortex-a76_firmwareMatch-

AND

armcortex-a76Match-

Node

armcortex-a76ae_firmwareMatch-

AND

armcortex-a76aeMatch-

Node

armcortex-a77_firmwareMatch-

AND

armcortex-a77Match-

Node

armcortex-a78_firmwareMatch-

AND

armcortex-a78Match-

Node

armcortex-a78ae_firmwareMatch-

AND

armcortex-a78aeMatch-

Node

armcortex-a78c_firmwareMatch-

AND

armcortex-a78cMatch-

Node

armcortex-x1_firmwareMatch-

AND

armcortex-x1Match-

Node

armcortex-x2_firmwareMatch-

AND

armcortex-x2Match-

Node

armcortex-a710_firmwareMatch-

AND

armcortex-a710Match-

Node

armcortex-a15_firmwareMatch-

AND

armcortex-a15Match-

Node

armneoverse_n1_firmwareMatch-

AND

armneoverse_n1Match-

Node

armneoverse_n2_firmwareMatch-

AND

armneoverse_n2Match-

VendorProductVersionCPE
amperecomputingampere_altra_max_firmware-cpe:2.3:o:amperecomputing:ampere_altra_max_firmware:-:*:*:*:*:*:*:*
amperecomputingampere_altra_max-cpe:2.3:h:amperecomputing:ampere_altra_max:-:*:*:*:*:*:*:*
amperecomputingampere_altra_firmware-cpe:2.3:o:amperecomputing:ampere_altra_firmware:-:*:*:*:*:*:*:*
amperecomputingampere_altra-cpe:2.3:h:amperecomputing:ampere_altra:-:*:*:*:*:*:*:*
armneoverse-e1_firmware-cpe:2.3:o:arm:neoverse-e1_firmware:-:*:*:*:*:*:*:*
armneoverse-e1-cpe:2.3:h:arm:neoverse-e1:-:*:*:*:*:*:*:*
armneoverse-v1_firmware-cpe:2.3:o:arm:neoverse-v1_firmware:-:*:*:*:*:*:*:*
armneoverse-v1-cpe:2.3:h:arm:neoverse-v1:-:*:*:*:*:*:*:*
armcortex-a57_firmware-cpe:2.3:o:arm:cortex-a57_firmware:-:*:*:*:*:*:*:*
armcortex-a57-cpe:2.3:h:arm:cortex-a57:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
amperecomputing	ampere_altra_max_firmware	-	cpe:2.3:o:amperecomputing:ampere_altra_max_firmware:-:::::::*
amperecomputing	ampere_altra_max	-	cpe:2.3:h:amperecomputing:ampere_altra_max:-:::::::*
amperecomputing	ampere_altra_firmware	-	cpe:2.3:o:amperecomputing:ampere_altra_firmware:-:::::::*
amperecomputing	ampere_altra	-	cpe:2.3:h:amperecomputing:ampere_altra:-:::::::*
arm	neoverse-e1_firmware	-	cpe:2.3:o:arm:neoverse-e1_firmware:-:::::::*
arm	neoverse-e1	-	cpe:2.3:h:arm:neoverse-e1:-:::::::*
arm	neoverse-v1_firmware	-	cpe:2.3:o:arm:neoverse-v1_firmware:-:::::::*
arm	neoverse-v1	-	cpe:2.3:h:arm:neoverse-v1:-:::::::*
arm	cortex-a57_firmware	-	cpe:2.3:o:arm:cortex-a57_firmware:-:::::::*
arm	cortex-a57	-	cpe:2.3:h:arm:cortex-a57:-:::::::*

Rows per page:

1-10 of 441

References

amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.html

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23960

developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhb

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

23.3%

JSON

Related for NVD:CVE-2022-25368

prion1 cvelist1 cve1