Lucene search

K
redosRedosROS-20240902-02
HistorySep 02, 2024 - 12:00 a.m.

ROS-20240902-02

2024-09-0200:00:00
redos.red-soft.ru
2
vulnerability
invd processor instruction
virtual machines
amd processors
remote attackers
memory integrity

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.7

Confidence

Low

A vulnerability in the implementation of the INVD processor instruction for virtual machines running on servers with AMD processors is associated with loss or omission of information.
AMD processors is associated with information loss or skipping. Exploitation of the vulnerability could allow
An attacker acting remotely could cause a guest virtual machine to lose memory integrity

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64linux-firmware< 20240709-1UNKNOWN

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.7

Confidence

Low