Lucene search
+L

2372 matches found

OSV
OSV
added 2022/07/12 7:15 p.m.11 views

CVE-2022-29901

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under...

6.5CVSS7.8AI score
SaveExploits0References14
OSV
OSV
added 2022/07/12 7:15 p.m.40 views

CVE-2022-29900

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions...

6.5CVSS3.8AI score
SaveExploits0References6
OSV
OSV
added 2022/07/12 7:15 p.m.4 views

DEBIAN-CVE-2022-29901

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under...

6.5CVSS7.4AI score0.04831EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/12 7:15 p.m.6 views

CVE-2022-29901

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under...

6.5CVSS7.4AI score0.04831EPSS
SaveExploits0References17Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/12 7:00 p.m.6 views

CVE-2022-29900

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions...

6.5CVSS7.4AI score0.03764EPSS
SaveExploits0References18
Xen Project
Xen Project
added 2022/07/12 4:36 p.m.456 views

Retbleed - arbitrary speculative code execution with return instructions

ISSUE DESCRIPTION Researchers at ETH Zurich have discovered Retbleed, allowing for arbitrary speculative execution in a victim context. For more details, see: https://comsec.ethz.ch/retbleed ETH Zurich have allocated CVE-2022-29900 for AMD and CVE-2022-29901 for Intel. Despite the similar...

6.5CVSS1.2AI score0.04831EPSS
SaveExploits0
OSV
OSV
added 2022/07/12 4:00 p.m.11 views

UBUNTU-CVE-2022-29901

Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under...

6.5CVSS7.4AI score0.04831EPSS
SaveExploits0References23
CNNVD
CNNVD
added 2022/07/12 12:00 a.m.11 views

AMD Processors 信息泄露漏洞

AMD Processors is a processor from AMD. A security vulnerability exists in AMD Processors that stems from a branch prediction error on a return instruction. An attacker could exploit this vulnerability to execute arbitrary speculative code...

6.5CVSS7.3AI score0.03764EPSS
SaveExploits0References56
CNNVD
CNNVD
added 2022/07/12 12:00 a.m.8 views

AMD CPU 安全漏洞

AMD CPUs are a family of CPUs from Ultraviolet Semiconductor AMD. The AMD CPUs suffer from a security vulnerability that stems from a faulty training branch prediction of a return instruction that may allow execution of arbitrary speculative code under certain microarchitecture-related conditions...

6.5AI score
SaveExploits0References23
Schneier on Security
Schneier on Security
added 2022/06/15 11:05 a.m.14 views

M1 Chip Vulnerability

This is a new vulnerability against Apples M1 chip. Researchers say that it is unpatchable. Researchers from MIT’s Computer Science and Artificial Intelligence Laboratory, however, have created a novel hardware attack, which combines memory corruption and speculative execution attacks to sidestep...

0.3AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2022/06/14 9:53 a.m.30 views

Don’t panic! “Unpatchable” Mac vulnerability discovered

Researchers at MITs Computer Science & Artificial Intelligence Lab CSAIL found an attack surface in a hardware-level security mechanism utilized in Apple M1 chips. The flaw is unpatchable, but attackers would need to chain it with other vulnerabilities to make use of the attack method. The hardwa...

0.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2022/06/11 8:31 a.m.52 views

MIT Researchers Discover New Flaw in Apple M1 CPUs That Can't Be Patched

A novel hardware attack dubbed PACMAN has been demonstrated against Apple's M1 processor chipsets, potentially arming a malicious actor with the capability to gain arbitrary code execution on macOS systems. It leverages "speculative execution attacks to bypass an important memory protection...

0.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/06/10 12:00 a.m.116 views

Amazon Linux AMI : kernel (ALAS-2022-1591)

The version of kernel installed on the remote host is prior to 4.14.281-144.502. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1591 advisory. A memory leak flaw was found in the Linux kernel's DMA subsystem, in the way a user calls DMAFROMDEVICE. This flaw...

9.1CVSS6.8AI score0.01169EPSS
SaveExploits8References40
NVD
NVD
added 2022/05/11 5:15 p.m.38 views

CVE-2021-26400

AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage...

4CVSS0.00228EPSS
SaveExploits0References1
Lenovo
Lenovo
added 2022/05/10 9:30 p.m.6 views

Intel Processor Speculative Cross Store Bypass Advisory - Lenovo Support US

No description provided...

5.5CVSS6.8AI score0.00242EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/05/10 8:30 p.m.5 views

CVE-2021-26400

AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage...

4CVSS4.9AI score0.00228EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2022/05/10 1:58 p.m.13 views

hw: cpu: intel: Intra-Mode BTI

A flaw was found in hw. The Intra-mode BTI refers to a variant of Branch Target Injection aka SpectreV2 BTI where an indirect branch speculates to an aliased predictor entry for a different indirect branch in the same predictor mode, and a disclosure gadget at the predicted target transiently...

6.5CVSS6.7AI score0.00447EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2022/05/10 1:58 p.m.7 views

kernel: speculation on incompletely validated data on IBM Power9

A flaw was found in the Linux kernel. IBM Power9 processors can speculatively operate on data stored in the L1 cache before it has been completely validated. The attack has limited access to memory and is only able to access memory normally permissible to the execution context. The highest threat...

5.1CVSS6.7AI score0.00383EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2022/05/10 1:43 p.m.12 views

hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715

A flaw was found in hw. The speculative execution window of AMD LFENCE/JMP mitigation MITIGATION V2-2 may be large enough to be exploited on AMD CPUs...

5.6CVSS6.6AI score0.74207EPSS
SaveExploits10References5
Tenable Nessus
Tenable Nessus
added 2022/05/05 12:00 a.m.60 views

Amazon Linux 2 : kernel (ALAS-2022-1793)

The version of kernel installed on the remote host is prior to 4.14.276-211.499. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1793 advisory. 2024-02-01: CVE-2022-41858 was added to this advisory. A use-after-free flaw was found in the Linux kernel's FUSE...

7.8CVSS6.5AI score0.01169EPSS
SaveExploits0References16
Rows per page
Query Builder