Orta CVSS 5.6
CVE-2022-23960: Xen: güvenlik açığı
Açıklama (NVD)
Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.
Özet bilgiler
- Ürün
- Xen Xen
- CVSS v3.1
- 5.6
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N - EPSS
- %0,50 (yüzdelik 43)
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| xen-xen | — | — | — |
| arm-cortex-r7-firmware | — | — | — |
| arm-cortex-r8-firmware | — | — | — |
| arm-cortex-a57-firmware | — | — | — |
| arm-cortex-a65-firmware | — | — | — |
| arm-cortex-a65ae-firmware | — | — | — |
| arm-cortex-a710-firmware | — | — | — |
| arm-cortex-a72-firmware | — | — | — |
| arm-cortex-a73-firmware | — | — | — |
| arm-cortex-a75-firmware | — | — | — |
| arm-cortex-a76-firmware | — | — | — |
| arm-cortex-a76ae-firmware | — | — | — |
| arm-cortex-a77-firmware | — | — | — |
| arm-cortex-a78-firmware | — | — | — |
| arm-cortex-a78ae-firmware | — | — | — |
| arm-cortex-x1-firmware | — | — | — |
| arm-cortex-x2-firmware | — | — | — |
| arm-neoverse-e1-firmware | — | — | — |
| arm-neoverse-v1-firmware | — | — | — |
| arm-neoverse-n1-firmware | — | — | — |
| arm-neoverse-n2-firmware | — | — | — |
| debian-debian-linux | 9.0 | 9.0 | — |
| debian-debian-linux | 10.0 | 10.0 | — |