5.5

CVE-2022-21125

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xen ≫ Xen HwPlatform x86
Fedoraproject ≫ Fedora Version 35
Fedoraproject ≫ Fedora Version 36
Intel ≫ Sgx Dcap SwPlatform linux Version < 1.14.100.3
Intel ≫ Sgx Dcap SwPlatform windows Version < 1.14.100.3
Intel ≫ Sgx Psw SwPlatform windows Version < 2.16.100.3
Intel ≫ Sgx Psw SwPlatform linux Version < 2.17.100.3
Intel ≫ Sgx Sdk SwPlatform windows Version < 2.16.100.3
Intel ≫ Sgx Sdk SwPlatform linux Version < 2.17.100.3
VMware ≫ ESXi Version 7.0 Update -
VMware ≫ ESXi Version 7.0 Update beta
VMware ≫ ESXi Version 7.0 Update update_1
VMware ≫ ESXi Version 7.0 Update update_1a
VMware ≫ ESXi Version 7.0 Update update_1b
VMware ≫ ESXi Version 7.0 Update update_1c
VMware ≫ ESXi Version 7.0 Update update_1d
VMware ≫ ESXi Version 7.0 Update update_2
VMware ≫ ESXi Version 7.0 Update update_2a
VMware ≫ ESXi Version 7.0 Update update_2c
VMware ≫ ESXi Version 7.0 Update update_2d
VMware ≫ ESXi Version 7.0 Update update_3c
VMware ≫ ESXi Version 7.0 Update update_3d
Debian ≫ Debian Linux Version 9.0
Debian ≫ Debian Linux Version 10.0
Debian ≫ Debian Linux Version 11.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.45% 0.928
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CISA-ADP 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-459 Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
Third Party Advisory
Mailing List
https://security.gentoo.org/glsa/202208-23
Third Party Advisory
https://www.debian.org/security/2022/dsa-5173
Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/06/16/1
Patch
Third Party Advisory
Mailing List
http://xenbits.xen.org/xsa/advisory-404.html
Patch
Third Party Advisory
https://www.debian.org/security/2022/dsa-5178
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/
https://www.debian.org/security/2022/dsa-5184
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MCVOMHBQRH4KP7IN6U24CW7F2D2L5KBS/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA/
https://security.netapp.com/advisory/ntap-20220624-0008/
Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html
Patch
Vendor Advisory