Information Disclosure

2022-12-1200:46:56

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

12.1%

JSON

kernel is vulnerable to Information Disclosure. This vulnerability occurs in some Intel® processors due to return predictor targets being shared non-transparently between contexts. This allows a potential attacker to view and disclose sensitive information through local access.

CPENameOperatorVersion
kerneleq4.9.54__29.el6
kerneleq2.6.32__504.23.4.el6
kerneleq2.6.32__431.53.2.el6
kerneleq4.18.0__193.6.3.el8_2
kerneleq2.6.32__358.11.1.el6
kerneleq3.10.0__1160.25.1.el7
kerneleq2.6.32__71.18.1.el6
kerneleq4.18.0__147.6.el8
kerneleq4.9.124__32.el6
kerneleq3.18.41__20.el6

Name	Operator	Version
kernel	eq	4.9.54__29.el6
kernel	eq	2.6.32__504.23.4.el6
kernel	eq	2.6.32__431.53.2.el6
kernel	eq	4.18.0__193.6.3.el8_2
kernel	eq	2.6.32__358.11.1.el6
kernel	eq	3.10.0__1160.25.1.el7
kernel	eq	2.6.32__71.18.1.el6
kernel	eq	4.18.0__147.6.el8
kernel	eq	4.9.124__32.el6
kernel	eq	3.18.41__20.el6

Rows per page:

1-10 of 8241

References

access.redhat.com/errata/RHSA-2022:7337

access.redhat.com/security/updates/classification/#important

access.redhat.com/solutions/6971358

bugzilla.redhat.com/show_bug.cgi?id=2115065

www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/post-barrier-return-stack-buffer-predictions.html