Lucene search
+L

2825 matches found

OSV
OSV
•added 2022/03/13 12:15 a.m.•13 views

DEBIAN-CVE-2022-23960

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer BHB to influence mispredicted branches. Then, cache allocation can allow the attacker to obtai...

5.6CVSS6.6AI score0.00499EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/13 12:15 a.m.•35 views

CVE-2022-23960

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer BHB to influence mispredicted branches. Then, cache allocation can allow the attacker to obtai...

5.6CVSS0.00499EPSS
SaveExploits0References5
Prion
Prion
•added 2022/03/13 12:15 a.m.•52 views

Design/Logic Flaw

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer BHB to influence mispredicted branches. Then, cache allocation can allow the attacker to obtai...

1.9CVSS6.2AI score0.00499EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2022/03/12 11:57 p.m.•3 views

CVE-2022-23960

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer BHB to influence mispredicted branches. Then, cache allocation can allow the attacker to obtai...

6.8CVSS0.00499EPSS
SaveExploits0References9
CVE
CVE
•added 2022/03/12 11:57 p.m.•543 views

CVE-2022-23960

CVE-2022-23960 affects Arm Cortex and Neoverse processors. It is a Spectre-BHB side-channel issue where shared branch history in the Branch History Buffer can influence mispredicted branches, enabling potential information disclosure through cache allocation. Documents note mitigations include de...

5.6CVSS6.4AI score0.00499EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2022/03/12 11:57 p.m.•233 views

CVE-2022-23960

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer BHB to influence mispredicted branches. Then, cache allocation can allow the attacker to obtai...

5.6CVSS5.8AI score0.00499EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/12 12:00 a.m.•7 views

CVE-2022-23960: Undefined Security Weakness

Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer BHB to influence mispredicted branches. Then, cache allocation can allow the attacker to obtai...

5.6CVSS6.5AI score0.00499EPSS
SaveExploits0References11
NCSC
NCSC
•added 2022/03/11 12:00 a.m.•26 views

Vulnerability fixed in ARM, AMD and Intel processors

Researchers at VU Amsterdam have found a new variant of the Spectre vulnerability. The researchers have dubbed the attack Branch History Injection. Previous mitigation for Spectre v2 is not sufficient to fully fix the vulnerability, according to the researchers. According to the researchers, this...

6.8CVSS6.7AI score0.00508EPSS
SaveExploits0
Cloud Foundry
Cloud Foundry
•added 2022/03/11 12:00 a.m.•119 views

USN-5318-1: Linux kernel vulnerabilities | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Nick Gregory discovered that the Linux kernel incorrectly handled network offload functionality. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2022-256...

7.8CVSS7.3AI score0.02612EPSS
SaveExploits6Affected Software1
attackerkb
attackerkb
•added 2022/03/10 5:47 p.m.•8 views

CVE-2022-25368

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history stored in the CPU BHB to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which...

4.7CVSS7AI score0.00299EPSS
SaveExploits0References4
NVD
NVD
•added 2022/03/10 5:47 p.m.•31 views

CVE-2022-25368

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history stored in the CPU BHB to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which...

4.7CVSS0.00299EPSS
SaveExploits0References3
Prion
Prion
•added 2022/03/10 5:47 p.m.•38 views

Design/Logic Flaw

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history stored in the CPU BHB to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which...

1.9CVSS4.9AI score0.00499EPSS
SaveExploits0References3
The Hacker News
The Hacker News
•added 2022/03/10 2:29 p.m.•103 views

New Exploit Bypasses Existing Spectre-V2 Mitigations in Intel, AMD, Arm CPUs

Researchers have disclosed a new technique that could be used to circumvent existing hardware mitigations in modern processors from Intel, AMD, and Arm, and stage speculative execution attacks such as Spectre to leak sensitive information from host memory. Attacks like Spectre are designed to bre...

5.6CVSS1.3AI score0.74041EPSS
SaveExploits10
Tenable Nessus
Tenable Nessus
•added 2022/03/10 12:00 a.m.•78 views

openSUSE 15 Security Update : kernel (openSUSE-SU-2022:0768-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0768-1 advisory. The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking...

7.8CVSS6.7AI score0.92795EPSS
SaveExploits117References34
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•19 views

ARM Neoverse和Cortex 安全漏洞

The cortex is an application software. Provides horizontally scalable, high-availability, multi-tenant long-term storage.ARM Neoverse is a high-performance ARM microarchitecture from ARM UK. It is used to maximize single-core performance for systems running demanding compute- and memory-intensive...

4.7CVSS6.9AI score0.00299EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/03/10 12:00 a.m.•91 views

openSUSE 15 Security Update : kernel (openSUSE-SU-2022:0760-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0760-1 advisory. - Amazon Linux has been made aware of a potential Branch Target Injection BTI issue sometimes referred to as Spectre variant 2. This is a...

7.8CVSS6.8AI score0.92795EPSS
SaveExploits116References69
OpenVAS
OpenVAS
•added 2022/03/10 12:00 a.m.•72 views

Debian: Security Advisory (DSA-5095-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.05528EPSS
SaveExploits21References4
Tenable Nessus
Tenable Nessus
•added 2022/03/10 12:00 a.m.•65 views

openSUSE 15 Security Update : kernel (openSUSE-SU-2022:0755-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0755-1 advisory. - Amazon Linux has been made aware of a potential Branch Target Injection BTI issue sometimes referred to as Spectre variant 2. This is a...

7.8CVSS6.8AI score0.92795EPSS
SaveExploits116References75
CVE
CVE
•added 2022/03/09 6:17 p.m.•137 views

CVE-2022-25368

CVE-2022-23960 describes Spectre-BHB: an attack on ARM Cortex and Neoverse CPUs that abuse the Branch History Buffer (BHB) to influence mispredicted branches, enabling a cache-related side-channel and potential information disclosure across security contexts. Affected: ARM Cortex and Neoverse pro...

4.7CVSS4.8AI score0.00299EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/03/09 6:17 p.m.•48 views

CVE-2022-25368

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history stored in the CPU BHB to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which...

5.1AI score0.00299EPSS
SaveExploits0References3
Rows per page
Query Builder