CVE-2020-13844

Опубликовано: 08 июн. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka "straight-line speculation."

Ссылки

http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.html
Mailing List
Third Party Advisory
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
Vendor Advisory
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculation
Vendor Advisory
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questions
Vendor Advisory
https://gcc.gnu.org/pipermail/gcc-patches/2020-June/547520.html
Patch
Third Party Advisory
http://lists.llvm.org/pipermail/llvm-dev/2020-June/142109.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00039.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00040.html
Mailing List
Third Party Advisory
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
Vendor Advisory
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/downloads/straight-line-speculation
Vendor Advisory
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/frequently-asked-questions
Vendor Advisory
https://gcc.gnu.org/pipermail/gcc-patches/2020-June/547520.html
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:arm:cortex-a32_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arm:cortex-a32:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:arm:cortex-a35_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arm:cortex-a35:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:arm:cortex-a53_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arm:cortex-a53:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:arm:cortex-a57_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arm:cortex-a57:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:arm:cortex-a72_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arm:cortex-a72:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:arm:cortex-a73_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arm:cortex-a73:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:arm:cortex-a34_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:arm:cortex-a34:-:*:*:*:*:*:*:*

Конфигурация 8

Одно из

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.00079

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-203

Связанные уязвимости

CVE-2020-13844

CVSS3: 5.5

ubuntu

больше 5 лет назад

CVE-2020-13844

CVSS3: 5.5

redhat

больше 5 лет назад

CVE-2020-13844

CVSS3: 5.5

debian

больше 5 лет назад

Arm Armv8-A core implementations utilizing speculative execution past ...

openSUSE-SU-2020:2301-1

suse-cvrf

около 5 лет назад

Security update for gcc7

openSUSE-SU-2020:2300-1

suse-cvrf

около 5 лет назад

Security update for gcc7

EPSS

Процентиль: 24%

0.00079

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-203