Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-252r-7vwr-8rfh

Опубликовано: 11 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

EPSS

Процентиль: 33%
0.00126
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200
CWE-203

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 2 лет назад

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

CVSS3: 5.5
redhat
больше 2 лет назад

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

CVSS3: 5.5
nvd
больше 2 лет назад

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

CVSS3: 5.5
debian
больше 2 лет назад

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Iso ...

CVSS3: 6.5
fstec
больше 2 лет назад

Уязвимость ядра операционной системы Linux, позволяющая нарушителю получить базовый адрес Kernel ASLR и получить доступ к памяти ядра

EPSS

Процентиль: 33%
0.00126
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200
CWE-203