Lucene search
K

199 matches found

RedhatCVE
RedhatCVE
added 2025/08/11 8:33 p.m.8 views

CVE-2025-8774

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

4.7CVSS7.1AI score0.00081EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2018-3620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data...

5.6CVSS7.3AI score0.02259EPSS
Exploits0References2
OSV
OSV
added 2025/08/09 9:15 p.m.2 views

CVE-2025-8774

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

4.7CVSS5.7AI score
Exploits0References4
NVD
NVD
added 2025/08/09 9:15 p.m.4 views

CVE-2025-8774

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

4.7CVSS0.00081EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/08/09 8:32 p.m.3 views

CVE-2025-8774 riscv-boom SonicBOOM L1 Data Cache timing discrepancy

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

2.5CVSS7AI score0.00081EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/08/09 8:32 p.m.10 views

CVE-2025-8774 riscv-boom SonicBOOM L1 Data Cache timing discrepancy

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this...

2.5CVSS0.00081EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/08/09 12:0 a.m.3 views

riscv-boom SonicBOOM 安全漏洞

riscv-boom SonicBOOM is a SonicBOOM: The Berkeley Out-of-Order RISC-V Processor open source SonicBOOM: The Berkeley Chaos Machine. A security vulnerability exists in riscv-boom SonicBOOM 2.2.3 and earlier versions, which stems from an observable timing difference issue in the component L1 Data...

4.7CVSS4.1AI score0.00081EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/08/09 12:0 a.m.4 views

PT-2025-32455 · Sonicboom · Sonicboom

Name of the Vulnerable Software and Affected Versions: riscv-boom SonicBOOM versions through 2.2.3 Description: A timing discrepancy exists in the L1 Data Cache Handler component of the software. This issue is considered problematic and requires local access for exploitation, which is described a...

2.5CVSS6.6AI score0.00081EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2025/08/06 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-5754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with...

5.6CVSS7.2AI score0.89595EPSS
Exploits3References2
SUSE CVE
SUSE CVE
added 2025/07/08 11:51 p.m.0 views

SUSE CVE-2024-36357

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

5.6CVSS7.7AI score0.00098EPSS
Exploits0References26
OSV
OSV
added 2025/07/08 5:15 p.m.1 views

DEBIAN-CVE-2024-36357

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

5.6CVSS6.7AI score0.00098EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/08 12:0 a.m.0 views

AMD Processors 安全漏洞

AMD Processors is a processor from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Processors that stems from the possibility that an attacker could infer data in the L1D cache, potentially leading to the disclosure of sensitive information across privileged boundaries...

5.6CVSS7.4AI score0.00098EPSS
Exploits0References3
OSV
OSV
added 2025/04/30 10:15 p.m.3 views

CVE-2023-37517

Missing "no cache" headers in HCL Leap permits sensitive data to be cached...

7.5CVSS5.8AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2025/03/26 2:14 a.m.4 views

kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions...

7.8CVSS6.8AI score0.00015EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/03/26 1:23 a.m.3 views

kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions...

7.8CVSS6.8AI score0.00015EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/03/26 1:15 a.m.3 views

kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions...

7.8CVSS6.8AI score0.00015EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/03/25 12:9 a.m.2 views

kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions...

7.8CVSS6.8AI score0.00015EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2025-21811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: protect access to buffers with no active references nilfslookupdirtydatabuffers, which iterates through the buffers attached to dirty data folios/pages,...

7.8CVSS6.8AI score0.00025EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/27 8:1 p.m.11 views

CVE-2025-21811 nilfs2: protect access to buffers with no active references

In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect access to buffers with no active references nilfslookupdirtydatabuffers, which iterates through the buffers attached to dirty data folios/pages, accesses the attached buffers without locking the folios/pages. For...

7.4AI score0.00025EPSS
Exploits0References8
OSV
OSV
added 2025/02/27 3:15 a.m.1 views

DEBIAN-CVE-2025-21785

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions...

7.8CVSS6.2AI score0.00015EPSS
Exploits0References1
Rows per page
Query Builder