Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2022-23823
HistoryJun 15, 2022 - 5:34 a.m.

CVE-2022-23823

2022-06-1505:34:05
redhat.com
access.redhat.com
32

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

28.6%

JSON

A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure.

Mitigation

For mitigations please refer to the AMD Security Bulletin at <https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1038&gt;

Related

ubuntucve 1
cvelist 1
nvd 1
openvas 1
amd 1
cve 1
nessus 1
prion 1
f5 2
thn 1
malwarebytes 1
ubuntucve
ubuntucve
CVE-2022-23823
2022-06-15 00:00:00
cvelist
cvelist
CVE-2022-23823
2022-06-14 00:00:00
nvd
nvd
CVE-2022-23823
2022-06-15 20:15:17
openvas
openvas
AMD CPU Information Disclosure Vulnerability (AMD-SB-1038, Hertzbleed)
2022-08-02 00:00:00
amd
amd
Frequency Scaling Timing Power Side-Channels
2022-06-14 00:00:00
cve
cve
CVE-2022-23823
2022-06-15 20:15:17
nessus
nessus
F5 Networks BIG-IP : AMD processors vulnerability (K43357358)
2022-07-13 00:00:00
prion
prion
Information disclosure
2022-06-15 20:15:00
f5
f5
K14335949 : Intel processors vulnerability CVE-2022-24436
2022-07-13 00:00:00
K43357358 : AMD processors vulnerability CVE-2022-23823
2022-07-13 00:00:00
thn
thn
New Hertzbleed Side Channel Attack Affects All Modern AMD and Intel CPUs
2022-06-15 09:45:00
malwarebytes
malwarebytes
Hertzbleed exposes computers’ secret whispers
2022-06-16 16:28:42

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

28.6%

JSON
Related for RH:CVE-2022-23823
ubuntucve1cvelist1nvd1openvas1amd1cve1nessus1prion1f52thn1malwarebytes1