Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-252r-7vwr-8rfh

Опубликовано: 11 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

EPSS

Процентиль: 47%
0.00241
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200
CWE-203

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 3 года назад

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

CVSS3: 5.5
redhat
около 3 лет назад

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

CVSS3: 5.5
nvd
почти 3 года назад

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

CVSS3: 5.5
msrc
4 месяца назад

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

CVSS3: 5.5
debian
почти 3 года назад

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Iso ...

EPSS

Процентиль: 47%
0.00241
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200
CWE-203