Boom CMS v8.0.7 - Cross Site Scripting Vulnerability

Document Title: =============== Boom CMS v8.0.7 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2274 Release Date: ============= 2023-07-02 Vulnerability Laboratory ID VL-ID: ==================================== 2274...

boom-boot bug fix and enhancement update

An update is available for boom-boot. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9....

CVE-2022-34641

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation...

CVE-2022-34641

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation...

CVE-2022-34641

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation...

CVE-2022-34636

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMA violation occurs during address translation...

Design/Logic Flaw

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMA violation occurs during address translation...

Design/Logic Flaw

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation...

CVE-2022-34641

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation...

CVE-2022-34641

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation...

CVE-2022-34641

CVE-2022-34641 affects CVA6 and RISCV-Boom due to an incorrect exception type emitted when a PMP violation occurs during address translation. Affected commits: CVA6 d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom ad64c5419151e5e886daee7084d8399713b46b4b. Consequence: this mismatch could l...

CVE-2022-34636

CVE-2022-34636 affects CVA6 and RISCV-Boom. The root issue is the use of an incorrect exception type when a PMA violation occurs during address translation. This is documented across multiple sources referencing the same commit set (CVA6 d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom ad6...

PT-2022-22264 · Unknown +1 · Riscv-Boom +1

Name of the Vulnerable Software and Affected Versions: CVA6 version d315ddd0f1be27c1b3f27eb0b8daf471a952299a RISCV-Boom version ad64c5419151e5e886daee7084d8399713b46b4b Description: The issue arises from the implementation of the incorrect exception type when a PMP violation occurs during address...

CVA6 security vulnerabilities

CVA6 is an application class 6 RISC-V CPU open-sourced by the OpenHW Group in Canada. A security vulnerability exists in CVA6 and RISCV-Boom that stems from a PMP conflict during address translation that could result in an incorrect exception type...

CVE-2022-34636: Improper Handling of Exceptional Conditions

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMA violation occurs during address translation...

CVE-2022-34641: Improper Handling of Exceptional Conditions

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation...

PT-2022-22259

Name of the Vulnerable Software and Affected Versions CVA6 version d315ddd0f1be27c1b3f27eb0b8daf471a952299a RISCV-Boom version ad64c5419151e5e886daee7084d8399713b46b4b Description The issue arises when a PMA violation occurs during address translation, resulting in the implementation of an...

new packages: boom-boot

An update is available for boom-boot. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

CVE-2022-26296

BOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis...

Information disclosure

BOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis...