PT-2022-17773

Name of the Vulnerable Software and Affected Versions BOOM: The Berkeley Out-of-Order RISC-V Processor affected versions not specified Description The issue allows unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. Recommendations At the...

Berkeley RISC-V-Boom security vulnerability

The Berkeley Riscv-boom is a University of Berkeley Riscv-boom for architectural research based on the RV64GC RISC-V kernel written in the Chisel hardware construction language. Berkeley Riscv-boom has a security vulnerability that could allow a local attacker to gain unauthorized access to...

CVE-2022-26296: Undefined Security Weakness

BOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis...

boom-boot bug fix and enhancement update

An update is available for boom-boot. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

boom-boot bug fix and enhancement update

An update is available for boom-boot. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

CVE-2020-29561

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

CVE-2020-29561

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

Design/Logic Flaw

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

CVE-2020-29561

CVE-2020-29561 affects SonicBOOM riscv-boom 3.0.0. The issue occurs for the LR path where a load translation can complete but still generate an exception, and the system does not avoid acquiring a reservation in that case. This relies on a specific low-level condition in the load/exception handli...

CVE-2020-29561

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

CVE-2020-29561

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

PT-2020-17189

Name of the Vulnerable Software and Affected Versions SonicBOOM riscv-boom version 3.0.0 Description An issue was discovered in SonicBOOM riscv-boom where it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception. Recommendations F...

Berkeley Riscv-boom Security Vulnerability

The Berkeley Riscv-boom is a University of Berkeley USA for architectural research based on the RV64GC RISC-V kernel written in the Chisel hardware construction language. A security vulnerability exists in SonicBOOM riscv-boom version 3.0.0, which stems from the fact that for LR, it does not avoi...

CVE-2020-29561: Improper Handling of Exceptional Conditions

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

New Grelos Skimmer Variants Siphon Credit Card Data

Just as seasonal online shopping kicks into high gear, new variants of the point-of-sale Grelos skimmer malware have been identified. Variants are targeting the payment-card data of online retail shoppers on dozens of compromised websites, researchers warn. The Grelos skimmer malware has been...

Boom! Mobile Customer Data Lost to Fullz House/Magecart Attack

Boom! Mobile’s U.S. website recently fell victim to an e-commerce attack, putting online shoppers in danger of payment-card theft, researchers said. Boom! is a wireless provider that resells mobile phone plans from Verizon, AT&T and T-Mobile USA, under its own brand and with its own perks the...

Mobile network operator falls into the hands of Fullz House criminal group

Update 2020-10-05: The malicious code has been removed from Boom! Mobiles website Most victims of Magecart-based attacks tend to be typical online shops selling various goods. However, every now and again we come across different types of businesses which were affected simply because they happene...

GHSA-2GGQ-VFCP-GWHJ Cross-Site Scripting in @hapi/boom

Versions of @hapi/boom prior to 0.3.8 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape error messages, which may allow attackers to execute arbitrary JavaScript in a victim's browser. Recommendation Upgrade to version 0.3.8 or later...

Cross-Site Scripting in @hapi/boom

Versions of @hapi/boom prior to 0.3.8 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape error messages, which may allow attackers to execute arbitrary JavaScript in a victim's browser. Recommendation Upgrade to version 0.3.8 or later...

PT-2020-20957

Name of the Vulnerable Software and Affected Versions @hapi/boom versions prior to 0.3.8 Description The issue arises from the package's failure to properly escape error messages, potentially allowing attackers to execute arbitrary JavaScript in a victim's browser. This could lead to Cross-Site...