214 matches found
Information disclosure
IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure...
CVE-2022-23824
IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure...
hw: cpu: Intel: information disclosure via local access
A flaw was found in hw. The unprotected alternative channel of return branch target prediction in some IntelR Processors may allow an authorized user to enable information disclosure via local access...
hw: cpu: Intel: Post-barrier Return Stack Buffer Predictions
A flaw was found in hw. In certain processors with Intel's Enhanced Indirect Branch Restricted Speculation eIBRS capabilities, soon after VM exit or IBPB command event, the linear address following the most recent near CALL instruction prior to a VM exit may be used as the Return Stack Buffer RSB...
hw: cpu: Intel: information disclosure via local access
A flaw was found in hw. The unprotected alternative channel of return branch target prediction in some IntelR Processors may allow an authorized user to enable information disclosure via local access...
hw: cpu: Intel: information disclosure via local access
A flaw was found in hw. The unprotected alternative channel of return branch target prediction in some IntelR Processors may allow an authorized user to enable information disclosure via local access...
Ubuntu: Security Advisory (USN-3525-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3580-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Intel® Processors Post Invalidation RSB Advisory
Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26373 Description: Non-transparent sharing of return predictor targets...
CVE-2022-28693
A flaw was found in hw. The unprotected alternative channel of return branch target prediction in some IntelR Processors may allow an authorized user to enable information disclosure via local access...
AMD Processors 信息泄露漏洞
AMD Processors is a processor from AMD. A security vulnerability exists in AMD Processors that stems from a branch prediction error on a return instruction. An attacker could exploit this vulnerability to execute arbitrary speculative code...
AMD CPU 安全漏洞
AMD CPUs are a family of CPUs from Ultraviolet Semiconductor AMD. The AMD CPUs suffer from a security vulnerability that stems from a faulty training branch prediction of a return instruction that may allow execution of arbitrary speculative code under certain microarchitecture-related conditions...
PT-2022-4409 · Intel +3 · Intel Processors +3
Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an unprotected alternative channel of return branch target prediction in some IntelR Processors, which may allow an authorized user to potentially enable...
The vulnerability of AMD processor-based LFENCE/JMP modules allows attackers to disclose protected information.
The vulnerability of AMD’s LFENCE/JMP processors lies in the characteristics of the branch prediction module’s operation. Exploiting this vulnerability allows an attacker to gain access to protected memory from a program that does not have the necessary privileges, by using the mechanism for...
PT-2022-2953 · Amd +8 · Amd Cpus +8
Name of the Vulnerable Software and Affected Versions: AMD CPUs affected versions not specified Description: The issue is related to the LFENCE/JMP module in AMD CPUs, specifically concerning the branch prediction mechanism. This allows an attacker to access protected memory from a program withou...
Mageia: Security Advisory (MGASA-2018-0101)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2743-1 : amd64-microcode - LTS security update
The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2743 advisory. It was discovered that systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an...
SUSE: Security Advisory (SUSE-SU-2018:2189-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Speculative Execution and Indirect Branch Prediction Side Channel Analysis Method
Summary: Updated Recommendations Section 04/04/2018 Today a team of security researchers disclosed several software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data from many types of computing devices with many different vendors’...
New Attacks Slaughter All Spectre Defenses
All defenses against Spectre side-channel attacks can now be considered broken, leaving billions of computers and other devices just as vulnerable today as they were when the hardware flaw was first announced three years ago. A paper published on Friday by a team of computer scientists from the...