7.8

CVE-2022-37459

Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Amperecomputing ≫ Ampere Altra Firmware Version < 1.08g
   Amperecomputing ≫ Ampere Altra Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.113
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-203 Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

https://amperecomputing.com/products/security-bulletins/retbleed.html
Vendor Advisory
https://developer.arm.com/documentation/ka005138/1-0/
Third Party Advisory