Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:42706
HistoryAug 10, 2023 - 11:12 p.m.

Information Disclosure

2023-08-1023:12:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

51.0%

JSON

Intel® Processors are vulnerable to Information Disclosure. This vulnerability occurs when an attacker uses a specially crafted instruction to access stale data from previously used vector registers on the same physical core. This could allow the attacker to infer sensitive information, such as passwords or encryption keys.

References

Related

oraclelinux 8
prion 1
nessus 62
cve 1
openvas 49
talosblog 1
debian 5
ubuntucve 1
alpinelinux 1
f5 1
ics 1
debiancve 1
xen 1
redhatcve 1
amazon 1
osv 22
cloudlinux 1
fedora 4
chrome 1
cloudfoundry 1
rocky 2
citrix 1
thn 2
ubuntu 17
mageia 3
trellix 2
hp 1
redhat 6
centos 1
oraclelinux
oraclelinux
microcode_ctl security update
2023-08-15 00:00:00
microcode_ctl security update
2023-08-15 00:00:00
Unbreakable Enterprise kernel-container security update
2023-09-11 00:00:00
prion
prion
Information disclosure
2023-08-11 03:15:00
nessus
nessus
Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2023-12785)
2023-09-11 00:00:00
Oracle Linux 8 : microcode_ctl (ELSA-2023-12723)
2023-08-15 00:00:00
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12782)
2023-09-11 00:00:00
cve
cve
CVE-2022-40982
2023-08-11 03:15:00
openvas
openvas
Missing Linux Kernel mitigations for 'GDS - Gather Data Sampling' hardware vulnerability (Downfall, INTEL-SA-00828)
2023-08-11 00:00:00
Debian: Security Advisory (DLA-3524-1)
2023-08-18 00:00:00
Debian: Security Advisory (DSA-5475-1)
2023-08-14 00:00:00
talosblog
talosblog
Recapping the top stories from Black Hat and DEF CON
2023-08-17 18:00:32
debian
debian
[SECURITY] [DLA 3524-1] linux security update
2023-08-10 19:42:10
[SECURITY] [DSA 5475-1] linux security update
2023-08-11 07:57:37
[SECURITY] [DLA 3525-1] linux-5.10 security update
2023-08-11 17:21:29
ubuntucve
ubuntucve
CVE-2022-40982
2023-08-08 00:00:00
alpinelinux
alpinelinux
CVE-2022-40982
2023-08-11 03:15:00
f5
f5
K000135795 : Downfall Attacks CVE-2022-40982
2023-08-09 00:00:00
ics
ics
Siemens SIMATIC IPCs
2023-09-14 12:00:00
debiancve
debiancve
CVE-2022-40982
2023-08-11 03:15:00
xen
xen
x86/Intel: Gather Data Sampling
2023-08-08 15:53:00
redhatcve
redhatcve
CVE-2022-40982
2023-08-08 17:20:33
amazon
amazon
Medium: microcode_ctl
2023-08-03 18:10:00
osv
osv
linux - security update
2023-08-10 00:00:00
CVE-2022-40982
2023-08-11 03:15:14
linux-5.10 - security update
2023-08-10 00:00:00
cloudlinux
cloudlinux
microcode_ctl: Fix of CVE-2022-40982
2023-08-30 17:12:48
fedora
fedora
[SECURITY] Fedora 38 Update: xen-4.17.2-1.fc38
2023-08-16 01:22:32
[SECURITY] Fedora 37 Update: xen-4.16.5-1.fc37
2023-08-27 00:50:59
[SECURITY] Fedora 38 Update: microcode_ctl-2.1-55.1.fc38
2023-08-16 01:22:33
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2023-08-01 00:00:00
cloudfoundry
cloudfoundry
USN-6286-1: Intel Microcode vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
rocky
rocky
microcode_ctl bug fix and enhancement update
2023-09-19 12:08:46
microcode_ctl bug fix and enhancement update
2023-09-19 12:10:01
citrix
citrix
Citrix Hypervisor Security Bulletin for CVE-2023-20569, CVE-2023-34319 and CVE-2022-40982
2023-08-08 17:07:04
thn
thn
iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A- and M-Series CPUs
2023-10-26 16:49:00
Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs
2023-08-09 15:39:00
ubuntu
ubuntu
Intel Microcode vulnerabilities
2023-08-14 00:00:00
Linux kernel vulnerabilities
2023-08-31 00:00:00
Linux kernel (Raspberry Pi) vulnerabilities
2023-09-06 00:00:00
mageia
mageia
Updated microcode packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel-linus packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel packages fix security vulnerabilities
2023-08-23 22:56:41
trellix
trellix
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
hp
hp
Intel 2023.3 IPU – BIOS August 2023 Security Updates
2023-08-08 00:00:00
redhat
redhat
(RHSA-2023:7423) Important: kernel security update
2023-11-21 14:52:31
(RHSA-2023:7424) Important: kernel-rt security update
2023-11-21 14:52:34
(RHSA-2023:7379) Important: kernel-rt security update
2023-11-21 08:15:24
centos
centos
bpftool, kernel, perf, python security update
2024-01-12 19:36:38

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

51.0%

JSON
Related for VERACODE:42706
oraclelinux8prion1nessus62cve1openvas49talosblog1debian5ubuntucve1alpinelinux1f51ics1debiancve1xen1redhatcve1amazon1osv22cloudlinux1fedora4chrome1cloudfoundry1rocky2citrix1thn2ubuntu17mageia3trellix2hp1redhat6centos1