Lucene search
VMwareVMSA-2022-0016HistoryJun 14, 2022 - 12:00 a.m.
VMware ESXi addresses DirectPath I/O (PCI-Passthrough) Information Leak vulnerabilities (CVE-2022-21123, CVE-2022-21125, CVE-2022-21166)
2022-06-1400:00:00
www.vmware.com
213
vmware esxi
directpath i/o
information leak
vulnerabilities
cve-2022-21123
cve-2022-21125
cve-2022-21166
3. DirectPath I/O (PCI-Passthrough) Information Leak vulnerabilities (CVE-2022-21123, CVE-2022-21125, CVE-2022-21166)
VMware ESXi contains information leak vulnerabilities when DirectPath I/O (PCI-Passthrough) is utilized. VMware has evaluated the severity of these issues to be in the Low severity range with a maximum CVSSv3 base score of 3.8.
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21123
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21125
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21166
docs.vmware.com/en/VMware-vSphere/6.7/rn/esxi670-202206001.html
docs.vmware.com/en/VMware-vSphere/7.0/rn/vsphere-esxi-70u3e-release-notes.html
kb.vmware.com/s/article/88632
kb.vmware.com/s/article/88695
kb.vmware.com/s/article/88707
via.vmw.com/vmsa-2022-0016-qna
www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
www.vmware.com/techpapers/2018/scheduler-options-vsphere67u2-perf.html
Related
nessus
nessus
Rocky Linux 8 : kernel-rt (RLSA-2022:6437)
2022-11-17 00:00:00
RHEL 8 : kernel (RHSA-2022:6460)
2022-09-13 00:00:00
Oracle Linux 8 : kernel (ELSA-2022-6460)
2022-09-14 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: xen-4.16.1-4.fc36
2022-07-01 01:09:33
[SECURITY] Fedora 36 Update: kernel-5.18.5-200.fc36
2022-06-17 01:16:22
[SECURITY] Fedora 35 Update: kernel-5.18.5-100.fc35
2022-06-18 01:45:12
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2022-09-14 00:00:00
kernel security and bug fix update
2022-08-11 00:00:00
microcode_ctl security update
2022-06-14 00:00:00
openvas
openvas
Fedora: Security Advisory for xen (FEDORA-2022-925fc688c1)
2022-07-02 00:00:00
Ubuntu: Security Advisory (USN-5485-1)
2022-06-18 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2022-391e24517d)
2022-06-19 00:00:00
xen
xen
x86: MMIO Stale Data vulnerabilities
2022-06-14 18:21:00
rocky
rocky
kernel-rt security and bug fix update
2022-09-13 07:36:33
kernel security, bug fix, and enhancement update
2022-09-13 07:37:13
microcode_ctl bug fix and enhancement update
2022-11-02 13:51:49
osv
osv
Moderate: kernel-rt security and bug fix update
2022-09-13 00:00:00
Moderate: kernel security, bug fix, and enhancement update
2022-09-13 07:37:13
almalinux
almalinux
Moderate: kernel-rt security and bug fix update
2022-09-13 00:00:00
Moderate: kernel security, bug fix, and enhancement update
2022-09-13 00:00:00
ubuntu
ubuntu
Linux kernel (OEM) vulnerabilities
2022-07-01 00:00:00
Linux kernel vulnerabilities
2022-06-17 00:00:00
Linux kernel vulnerabilities
2022-06-16 00:00:00
redhat
redhat
(RHSA-2022:6460) Moderate: kernel security, bug fix, and enhancement update
2022-09-13 07:37:13
(RHSA-2022:6437) Moderate: kernel-rt security and bug fix update
2022-09-13 07:36:33
(RHSA-2022:7280) Important: kernel-rt security and bug fix update
2022-11-01 14:04:44
intel
intel
Intel® Processors MMIO Stale Data Advisory
2022-10-19 00:00:00
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-06-29 19:18:17
Updated kernel-linus packages fix security vulnerabilities
2022-06-29 19:18:17
hp
hp
Intel® Processors June 2022 Security Update
2022-06-14 00:00:00
mscve
mscve
Microsoft Guidance on Intel Processor MMIO Stale Data Vulnerabilities
2022-06-14 07:00:00
Intel: CVE-2022-21123 Shared Buffers Data Read (SBDR)
2022-06-14 07:00:00
Intel: CVE-2022-21125 Shared Buffers Data Sampling (SBDS)
2022-06-14 07:00:00
malwarebytes
malwarebytes
Intel CPU vulnerabilities fixed. But should you update?
2023-03-06 07:00:00
citrix
citrix
Citrix Hypervisor Security Update
2022-06-23 20:06:39
centos
centos
bpftool, kernel, perf, python security update
2022-08-15 17:35:43
debian
debian
[SECURITY] [DSA 5178-1] intel-microcode security update
2022-07-06 13:12:52
[SECURITY] [DSA 5184-1] xen security update
2022-07-15 18:05:47
f5
f5
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Intel Processors affect IBM Cloud Pak System
2023-03-31 15:06:36
Security Bulletin: IBM DataPower Gateway potentially affected by CPU side-channel (CVE-2022-21166)
2022-12-16 18:59:39
Security Bulletin: For IBM Cloudpak for Watson AIOPS 3.5.1
2022-11-23 22:42:31
redhatcve
redhatcve
debiancve
debiancve
nvd
nvd
veracode
veracode
Information Disclosure
2022-06-16 21:06:02
Information Disclosure
2022-06-16 21:03:37
Information Disclosure
2022-06-16 21:02:26
ubuntucve
ubuntucve
cve
cve
cvelist
cvelist
prion
prion
Design/Logic Flaw
2022-06-15 20:15:00
Input validation
2022-06-15 20:15:00
Information disclosure
2022-06-15 21:15:00
suse
suse
Security update for xen (important)
2022-09-01 00:00:00
Security update for xen (important)
2022-07-29 00:00:00
Security update for xen (important)
2022-07-29 00:00:00
amazon
amazon
Important: kernel
2022-07-06 03:13:00
Medium: microcode_ctl
2022-06-30 23:38:00
ics
ics
Siemens SIMATIC MV500 Devices
2023-07-13 12:00:00
cloudfoundry
cloudfoundry
USN-5486-1: Intel Microcode vulnerabilities | Cloud Foundry
2022-06-30 00:00:00
mskb
mskb
June 14, 2022—KB5014743 (Security-only update)
2022-06-14 07:00:00